./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 826ab2ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-826ab2b [2024-11-13 14:24:34,079 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-13 14:24:34,189 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-13 14:24:34,199 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-13 14:24:34,201 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-13 14:24:34,240 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-13 14:24:34,241 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-13 14:24:34,241 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-13 14:24:34,243 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-13 14:24:34,243 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-13 14:24:34,245 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-13 14:24:34,245 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-13 14:24:34,245 INFO L153 SettingsManager]: * Use SBE=true [2024-11-13 14:24:34,246 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-13 14:24:34,246 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-13 14:24:34,246 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-13 14:24:34,246 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-13 14:24:34,247 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-13 14:24:34,247 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-13 14:24:34,248 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-13 14:24:34,248 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-13 14:24:34,249 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-13 14:24:34,249 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-13 14:24:34,249 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-13 14:24:34,249 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-13 14:24:34,249 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 [2024-11-13 14:24:34,620 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-13 14:24:34,629 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-13 14:24:34,632 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-13 14:24:34,633 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-13 14:24:34,634 INFO L274 PluginConnector]: CDTParser initialized [2024-11-13 14:24:34,635 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c Unable to find full path for "g++" [2024-11-13 14:24:36,541 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-13 14:24:37,105 INFO L384 CDTParser]: Found 1 translation units. [2024-11-13 14:24:37,106 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c [2024-11-13 14:24:37,143 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/data/339d5650f/12269b7e43004a03aa30b8da530d972b/FLAG24062543a [2024-11-13 14:24:37,168 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/data/339d5650f/12269b7e43004a03aa30b8da530d972b [2024-11-13 14:24:37,172 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-13 14:24:37,175 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-13 14:24:37,177 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-13 14:24:37,179 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-13 14:24:37,185 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-13 14:24:37,187 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 02:24:37" (1/1) ... [2024-11-13 14:24:37,188 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b0805b3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:37, skipping insertion in model container [2024-11-13 14:24:37,190 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 02:24:37" (1/1) ... [2024-11-13 14:24:37,293 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-13 14:24:38,047 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 14:24:38,073 INFO L200 MainTranslator]: Completed pre-run [2024-11-13 14:24:38,084 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [48] [2024-11-13 14:24:38,086 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [716] [2024-11-13 14:24:38,087 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [736] [2024-11-13 14:24:38,088 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [857] [2024-11-13 14:24:38,088 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification13_spec.i","") [2398] [2024-11-13 14:24:38,088 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [2488] [2024-11-13 14:24:38,088 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2497] [2024-11-13 14:24:38,088 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2589] [2024-11-13 14:24:38,089 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2940] [2024-11-13 14:24:38,090 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2975] [2024-11-13 14:24:38,265 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 14:24:38,310 INFO L204 MainTranslator]: Completed translation [2024-11-13 14:24:38,311 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38 WrapperNode [2024-11-13 14:24:38,311 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-13 14:24:38,312 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-13 14:24:38,312 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-13 14:24:38,312 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-13 14:24:38,318 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:38,346 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:38,979 INFO L138 Inliner]: procedures = 91, calls = 341, calls flagged for inlining = 194, calls inlined = 985, statements flattened = 34829 [2024-11-13 14:24:38,981 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-13 14:24:38,982 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-13 14:24:38,982 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-13 14:24:38,982 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-13 14:24:38,994 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:38,994 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,052 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,294 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-13 14:24:39,295 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,295 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,601 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,918 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,950 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:39,999 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:40,092 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-13 14:24:40,094 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-13 14:24:40,095 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-13 14:24:40,095 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-13 14:24:40,096 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (1/1) ... [2024-11-13 14:24:40,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:24:40,119 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:24:40,136 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:24:40,139 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-13 14:24:40,168 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-13 14:24:40,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-13 14:24:40,170 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-13 14:24:40,171 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-13 14:24:40,171 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-13 14:24:40,172 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-13 14:24:40,172 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-13 14:24:40,485 INFO L238 CfgBuilder]: Building ICFG [2024-11-13 14:24:40,487 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-13 14:24:58,884 INFO L? ?]: Removed 14812 outVars from TransFormulas that were not future-live. [2024-11-13 14:24:58,885 INFO L287 CfgBuilder]: Performing block encoding [2024-11-13 14:24:59,050 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-13 14:24:59,050 INFO L316 CfgBuilder]: Removed 61 assume(true) statements. [2024-11-13 14:24:59,050 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 02:24:59 BoogieIcfgContainer [2024-11-13 14:24:59,052 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-13 14:24:59,053 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-13 14:24:59,053 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-13 14:24:59,058 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-13 14:24:59,058 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:24:59,059 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.11 02:24:37" (1/3) ... [2024-11-13 14:24:59,060 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7464fe4d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 02:24:59, skipping insertion in model container [2024-11-13 14:24:59,060 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:24:59,060 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:24:38" (2/3) ... [2024-11-13 14:24:59,060 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7464fe4d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 02:24:59, skipping insertion in model container [2024-11-13 14:24:59,060 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:24:59,060 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 02:24:59" (3/3) ... [2024-11-13 14:24:59,062 INFO L333 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product29.cil.c [2024-11-13 14:24:59,348 INFO L299 stractBuchiCegarLoop]: Interprodecural is true [2024-11-13 14:24:59,348 INFO L300 stractBuchiCegarLoop]: Hoare is None [2024-11-13 14:24:59,348 INFO L301 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-13 14:24:59,348 INFO L302 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-13 14:24:59,349 INFO L303 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-13 14:24:59,349 INFO L304 stractBuchiCegarLoop]: Difference is false [2024-11-13 14:24:59,349 INFO L305 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-13 14:24:59,349 INFO L309 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-13 14:24:59,384 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:24:59,671 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2378 [2024-11-13 14:24:59,671 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:24:59,671 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:24:59,681 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:24:59,682 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:24:59,682 INFO L331 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-13 14:24:59,706 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:24:59,891 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2378 [2024-11-13 14:24:59,891 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:24:59,891 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:24:59,895 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:24:59,896 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:24:59,911 INFO L745 eck$LassoCheckResult]: Stem: 4971#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 4675#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 8014#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7699#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 672#valid_product_returnLabel#1true main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 7744#L2927true assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1539#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1810#L783true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 2536#getOrigin_returnLabel#1true aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9282#L409true assume 0 == initPersonOnFloor_~floor#1; 8099#L410true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1039#L517-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2566#L201true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7883#L213-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 980#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7638#aliceCall_returnLabel#1true havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 8983#L783-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 405#getOrigin_returnLabel#2true angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5706#L409-1true assume 0 == initPersonOnFloor_~floor#1; 6242#L410-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3585#L517-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8387#L201-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6457#L213-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3393#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7848#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 7248#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 3707#__utac_acc__Specification13_spec__1_returnLabel#1true havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 662#L1792true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3464#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 639#L1128true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 5791#buttonForFloorIsPressed_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 8935#L1942true assume !(0 != timeShift_~tmp___9~2#1); 5999#L2033true assume 1 == ~doorState~0;~doorState~0 := 0; 165#L2033-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 7557#L1695true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 5561#isAnyLiftButtonPressed_returnLabel#1true stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 4570#L1668true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 4947#L1315-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 5119#L1484-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 3049#stopRequestedInDirection__wrappee__empty_returnLabel#3true stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 1647#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 9148#L2041true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 6765#L1730true assume !(1 == ~currentHeading~0); 5330#L1740true assume !(0 == ~currentFloorID~0); 5062#L1740-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5702#L1746-1true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4142#L2050-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 1025#L2425true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 2027#L2426true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 6646#L2245true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 884#L2249-2true [2024-11-13 14:24:59,916 INFO L747 eck$LassoCheckResult]: Loop: 884#L2249-2true assume !false; 84#L2250true assume existInLiftCallsInDirection_~i~0#1 < 5; 6866#L2251true assume !(0 == existInLiftCallsInDirection_~i~0#1); 1929#$Ultimate##3696true assume !(1 == existInLiftCallsInDirection_~i~0#1); 7212#$Ultimate##3700true assume !(2 == existInLiftCallsInDirection_~i~0#1); 4679#$Ultimate##3704true assume !(3 == existInLiftCallsInDirection_~i~0#1); 3548#$Ultimate##3708true assume !(4 == existInLiftCallsInDirection_~i~0#1); 101#L2292-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 884#L2249-2true [2024-11-13 14:24:59,924 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:24:59,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1983246906, now seen corresponding path program 1 times [2024-11-13 14:24:59,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:24:59,938 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1474565581] [2024-11-13 14:24:59,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:24:59,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:00,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:00,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:00,737 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:00,738 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1474565581] [2024-11-13 14:25:00,739 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1474565581] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:00,740 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:00,740 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:25:00,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164090341] [2024-11-13 14:25:00,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:00,748 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:00,749 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:00,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1745252733, now seen corresponding path program 1 times [2024-11-13 14:25:00,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:00,750 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168062325] [2024-11-13 14:25:00,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:00,750 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:00,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:00,769 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:00,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:00,802 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:00,879 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:25:00,879 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:25:00,880 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:25:00,880 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:25:00,880 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-11-13 14:25:00,880 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:00,880 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:25:00,881 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:25:00,881 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2024-11-13 14:25:00,881 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:25:00,881 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:25:00,902 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:25:00,996 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:25:00,996 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-11-13 14:25:00,998 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:00,999 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:01,002 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:01,005 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2024-11-13 14:25:01,006 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 14:25:01,006 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:25:01,046 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2024-11-13 14:25:01,046 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:01,046 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:01,049 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:01,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2024-11-13 14:25:01,053 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-11-13 14:25:01,053 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:25:01,110 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-11-13 14:25:01,115 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2024-11-13 14:25:01,115 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:25:01,115 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:25:01,115 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:25:01,115 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:25:01,115 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-11-13 14:25:01,116 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:01,116 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:25:01,116 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:25:01,116 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2024-11-13 14:25:01,116 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:25:01,116 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:25:01,117 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:25:01,220 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:25:01,229 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-11-13 14:25:01,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:01,233 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:01,238 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:01,245 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2024-11-13 14:25:01,250 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 14:25:01,281 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 14:25:01,281 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 14:25:01,282 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 14:25:01,286 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 14:25:01,286 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 14:25:01,296 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 14:25:01,296 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 14:25:01,306 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-11-13 14:25:01,315 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2024-11-13 14:25:01,319 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2024-11-13 14:25:01,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:01,327 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:01,340 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:01,342 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-11-13 14:25:01,342 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-11-13 14:25:01,345 INFO L474 LassoAnalysis]: Proved termination. [2024-11-13 14:25:01,342 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2024-11-13 14:25:01,346 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2024-11-13 14:25:01,365 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2024-11-13 14:25:01,370 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-11-13 14:25:01,404 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:01,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:01,614 INFO L255 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-13 14:25:01,619 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:25:01,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:01,763 WARN L253 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-11-13 14:25:01,764 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:25:02,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:02,086 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2024-11-13 14:25:02,122 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:03,756 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2024-11-13 14:25:03,871 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 24724 states and 46388 transitions. Complement of second has 18 states. [2024-11-13 14:25:03,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2024-11-13 14:25:03,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:03,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 32101 transitions. [2024-11-13 14:25:03,925 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32101 transitions. Stem has 51 letters. Loop has 8 letters. [2024-11-13 14:25:03,927 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:03,927 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32101 transitions. Stem has 59 letters. Loop has 8 letters. [2024-11-13 14:25:03,928 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:03,929 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32101 transitions. Stem has 51 letters. Loop has 16 letters. [2024-11-13 14:25:03,930 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:03,932 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24724 states and 46388 transitions. [2024-11-13 14:25:04,203 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4674 [2024-11-13 14:25:04,381 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24724 states to 17017 states and 31845 transitions. [2024-11-13 14:25:04,382 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16987 [2024-11-13 14:25:04,420 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16988 [2024-11-13 14:25:04,421 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17017 states and 31845 transitions. [2024-11-13 14:25:04,433 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:04,433 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17017 states and 31845 transitions. [2024-11-13 14:25:04,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17017 states and 31845 transitions. [2024-11-13 14:25:04,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17017 to 16991. [2024-11-13 14:25:04,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16991 states, 16991 states have (on average 1.8719321993996823) internal successors, (31806), 16990 states have internal predecessors, (31806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:04,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16991 states to 16991 states and 31806 transitions. [2024-11-13 14:25:04,980 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16991 states and 31806 transitions. [2024-11-13 14:25:04,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:04,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:04,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:04,989 INFO L87 Difference]: Start difference. First operand 16991 states and 31806 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:05,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:05,605 INFO L93 Difference]: Finished difference Result 16973 states and 31675 transitions. [2024-11-13 14:25:05,605 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16973 states and 31675 transitions. [2024-11-13 14:25:05,920 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4658 [2024-11-13 14:25:06,036 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16973 states to 16964 states and 31666 transitions. [2024-11-13 14:25:06,037 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16945 [2024-11-13 14:25:06,061 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16945 [2024-11-13 14:25:06,061 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16964 states and 31666 transitions. [2024-11-13 14:25:06,073 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:06,074 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16964 states and 31666 transitions. [2024-11-13 14:25:06,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16964 states and 31666 transitions. [2024-11-13 14:25:06,297 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16964 to 9449. [2024-11-13 14:25:06,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9449 states, 9449 states have (on average 1.8667583871309132) internal successors, (17639), 9448 states have internal predecessors, (17639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:06,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9449 states to 9449 states and 17639 transitions. [2024-11-13 14:25:06,349 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2024-11-13 14:25:06,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:25:06,350 INFO L424 stractBuchiCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2024-11-13 14:25:06,350 INFO L331 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-13 14:25:06,350 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9449 states and 17639 transitions. [2024-11-13 14:25:06,399 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2376 [2024-11-13 14:25:06,399 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:06,399 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:06,401 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:06,402 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:06,402 INFO L745 eck$LassoCheckResult]: Stem: 75964#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 75700#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 75701#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 77540#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 70021#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 70022#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 71722#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 71723#L783 assume !(0 == getOrigin_~person#1); 72177#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 69216#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 73316#L409 assume 0 == initPersonOnFloor_~floor#1; 77644#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68700#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 70773#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 70622#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 70668#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 70669#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 77516#L783-1 assume !(0 == getOrigin_~person#1); 68518#L787-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 68519#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 69413#L409-1 assume 0 == initPersonOnFloor_~floor#1; 76521#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 69102#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 74629#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 75118#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 74423#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 74424#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 77352#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 74767#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 69999#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 70000#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 69950#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 69951#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 69072#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 69073#L1942 assume !(0 != timeShift_~tmp___9~2#1); 76698#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 68813#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 68814#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 71243#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 75601#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 75603#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 75941#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 68445#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 69670#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 71901#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 77110#L1730 assume !(1 == ~currentHeading~0); 76253#L1740 assume !(0 == ~currentFloorID~0); 76048#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 76049#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 70382#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 70749#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 70750#L2426 assume !(1 == ~prevDir~0); 72516#L2452 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 72641#L2245-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 74567#L2249-8 [2024-11-13 14:25:06,403 INFO L747 eck$LassoCheckResult]: Loop: 74567#L2249-8 assume !false; 72426#L2250-2 assume existInLiftCallsInDirection_~i~0#1 < 5; 72427#L2251-2 assume !(0 == existInLiftCallsInDirection_~i~0#1); 75879#$Ultimate##3852 assume !(1 == existInLiftCallsInDirection_~i~0#1); 76095#$Ultimate##3856 assume !(2 == existInLiftCallsInDirection_~i~0#1); 74393#$Ultimate##3860 assume !(3 == existInLiftCallsInDirection_~i~0#1); 68770#$Ultimate##3864 assume !(4 == existInLiftCallsInDirection_~i~0#1); 68772#L2292-5 existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 74567#L2249-8 [2024-11-13 14:25:06,404 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:06,404 INFO L85 PathProgramCache]: Analyzing trace with hash 1784088386, now seen corresponding path program 1 times [2024-11-13 14:25:06,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:06,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2135694031] [2024-11-13 14:25:06,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:06,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:06,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:06,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:06,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:06,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2135694031] [2024-11-13 14:25:06,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2135694031] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:06,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:06,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:06,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141970662] [2024-11-13 14:25:06,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:06,913 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:06,914 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:06,914 INFO L85 PathProgramCache]: Analyzing trace with hash 1772836477, now seen corresponding path program 1 times [2024-11-13 14:25:06,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:06,914 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [929832579] [2024-11-13 14:25:06,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:06,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:06,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:06,939 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:06,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:06,970 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:07,038 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:25:07,038 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:25:07,039 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:25:07,039 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:25:07,039 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-11-13 14:25:07,039 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,039 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:25:07,039 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:25:07,039 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2024-11-13 14:25:07,039 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:25:07,039 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:25:07,040 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:25:07,119 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:25:07,120 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-11-13 14:25:07,120 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,120 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:07,122 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:07,124 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2024-11-13 14:25:07,130 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 14:25:07,130 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:25:07,190 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2024-11-13 14:25:07,190 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,190 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:07,192 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:07,198 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2024-11-13 14:25:07,199 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-11-13 14:25:07,199 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:25:07,244 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-11-13 14:25:07,249 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2024-11-13 14:25:07,249 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:25:07,249 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:25:07,249 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:25:07,249 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:25:07,249 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-11-13 14:25:07,249 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,249 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:25:07,249 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:25:07,249 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2024-11-13 14:25:07,249 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:25:07,249 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:25:07,250 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:25:07,322 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:25:07,322 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-11-13 14:25:07,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:07,324 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:07,329 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2024-11-13 14:25:07,331 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 14:25:07,362 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 14:25:07,362 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 14:25:07,362 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 14:25:07,362 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 14:25:07,362 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 14:25:07,363 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 14:25:07,363 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 14:25:07,369 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-11-13 14:25:07,372 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2024-11-13 14:25:07,372 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2024-11-13 14:25:07,372 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:25:07,372 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:25:07,378 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:25:07,385 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2024-11-13 14:25:07,386 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-11-13 14:25:07,386 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-11-13 14:25:07,386 INFO L474 LassoAnalysis]: Proved termination. [2024-11-13 14:25:07,386 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2024-11-13 14:25:07,425 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2024-11-13 14:25:07,426 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-11-13 14:25:07,457 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:07,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:07,734 INFO L255 TraceCheckSpWp]: Trace formula consists of 629 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-13 14:25:07,738 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:25:07,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:07,933 WARN L253 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-11-13 14:25:07,934 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:25:08,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:08,179 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2024-11-13 14:25:08,185 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224 Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:08,889 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fcdfdca5-5cb8-4288-91f3-3fcaeba6143a/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2024-11-13 14:25:08,952 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224. Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 17020 states and 31749 transitions. Complement of second has 17 states. [2024-11-13 14:25:08,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2024-11-13 14:25:08,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:08,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 17626 transitions. [2024-11-13 14:25:08,969 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17626 transitions. Stem has 54 letters. Loop has 8 letters. [2024-11-13 14:25:08,971 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:08,971 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17626 transitions. Stem has 62 letters. Loop has 8 letters. [2024-11-13 14:25:08,972 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:08,972 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17626 transitions. Stem has 54 letters. Loop has 16 letters. [2024-11-13 14:25:08,973 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:25:08,973 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17020 states and 31749 transitions. [2024-11-13 14:25:09,066 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4672 [2024-11-13 14:25:09,146 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17020 states to 17014 states and 31743 transitions. [2024-11-13 14:25:09,146 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16965 [2024-11-13 14:25:09,169 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16966 [2024-11-13 14:25:09,170 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17014 states and 31743 transitions. [2024-11-13 14:25:09,171 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:09,172 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17014 states and 31743 transitions. [2024-11-13 14:25:09,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17014 states and 31743 transitions. [2024-11-13 14:25:09,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17014 to 9473. [2024-11-13 14:25:09,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9473 states, 9473 states have (on average 1.866040325134593) internal successors, (17677), 9472 states have internal predecessors, (17677), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:09,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9473 states to 9473 states and 17677 transitions. [2024-11-13 14:25:09,412 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9473 states and 17677 transitions. [2024-11-13 14:25:09,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:09,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:25:09,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:25:09,412 INFO L87 Difference]: Start difference. First operand 9473 states and 17677 transitions. Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:09,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:09,870 INFO L93 Difference]: Finished difference Result 9491 states and 17695 transitions. [2024-11-13 14:25:09,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9491 states and 17695 transitions. [2024-11-13 14:25:09,935 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:09,988 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9491 states to 9491 states and 17695 transitions. [2024-11-13 14:25:09,988 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9453 [2024-11-13 14:25:10,001 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9453 [2024-11-13 14:25:10,001 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9491 states and 17695 transitions. [2024-11-13 14:25:10,003 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:10,004 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9491 states and 17695 transitions. [2024-11-13 14:25:10,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9491 states and 17695 transitions. [2024-11-13 14:25:10,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9491 to 9488. [2024-11-13 14:25:10,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9488 states, 9488 states have (on average 1.8646711635750421) internal successors, (17692), 9487 states have internal predecessors, (17692), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:10,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9488 states to 9488 states and 17692 transitions. [2024-11-13 14:25:10,236 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2024-11-13 14:25:10,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:25:10,237 INFO L424 stractBuchiCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2024-11-13 14:25:10,237 INFO L331 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-13 14:25:10,237 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9488 states and 17692 transitions. [2024-11-13 14:25:10,294 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:10,294 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:10,294 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:10,295 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:10,295 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:10,296 INFO L745 eck$LassoCheckResult]: Stem: 121634#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 121367#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 121368#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 123222#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 115683#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 115684#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 117384#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 117385#L783 assume !(0 == getOrigin_~person#1); 117837#L787 assume !(1 == getOrigin_~person#1); 114879#L791 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 114880#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 123509#L409 assume 0 == initPersonOnFloor_~floor#1; 123326#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 114362#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 116434#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 116284#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 116330#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 116331#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 123198#L783-1 assume !(0 == getOrigin_~person#1); 114178#L787-1 assume !(1 == getOrigin_~person#1); 114180#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 120275#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 123511#L409-1 assume 0 == initPersonOnFloor_~floor#1; 122522#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 114766#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 120296#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 120785#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 120087#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 120088#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 123033#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 120434#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 115661#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 115662#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 115612#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 115613#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 114736#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 114737#L1942 assume !(0 != timeShift_~tmp___9~2#1); 122376#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 114477#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 114478#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 116905#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 121268#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 121270#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 121611#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 114107#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 115332#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 117563#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 122792#L1730 assume !(1 == ~currentHeading~0); 121926#L1740 assume !(0 == ~currentFloorID~0); 121718#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 121719#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 116044#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 116411#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 116412#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 118181#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 120862#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 114971#L2315-2 [2024-11-13 14:25:10,297 INFO L747 eck$LassoCheckResult]: Loop: 114971#L2315-2 assume !false; 114972#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 121183#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 121184#L2324-2 assume !false; 123227#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 121597#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 114971#L2315-2 [2024-11-13 14:25:10,297 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:10,297 INFO L85 PathProgramCache]: Analyzing trace with hash -1148840217, now seen corresponding path program 1 times [2024-11-13 14:25:10,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:10,297 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [87035836] [2024-11-13 14:25:10,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:10,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:10,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:10,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:10,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:10,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [87035836] [2024-11-13 14:25:10,443 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [87035836] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:10,443 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:10,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 14:25:10,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166194790] [2024-11-13 14:25:10,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:10,444 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:10,444 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:10,445 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 1 times [2024-11-13 14:25:10,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:10,445 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154917004] [2024-11-13 14:25:10,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:10,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:10,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:10,462 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:10,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:10,476 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:10,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:10,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:25:10,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:25:10,522 INFO L87 Difference]: Start difference. First operand 9488 states and 17692 transitions. cyclomatic complexity: 8239 Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:10,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:10,798 INFO L93 Difference]: Finished difference Result 9454 states and 17624 transitions. [2024-11-13 14:25:10,798 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9454 states and 17624 transitions. [2024-11-13 14:25:10,862 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:10,915 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9454 states to 9454 states and 17624 transitions. [2024-11-13 14:25:10,915 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9416 [2024-11-13 14:25:10,937 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9416 [2024-11-13 14:25:10,937 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9454 states and 17624 transitions. [2024-11-13 14:25:10,944 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:10,944 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2024-11-13 14:25:10,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9454 states and 17624 transitions. [2024-11-13 14:25:11,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9454 to 9454. [2024-11-13 14:25:11,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8641844721810874) internal successors, (17624), 9453 states have internal predecessors, (17624), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:11,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17624 transitions. [2024-11-13 14:25:11,177 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2024-11-13 14:25:11,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:25:11,181 INFO L424 stractBuchiCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2024-11-13 14:25:11,181 INFO L331 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-13 14:25:11,181 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17624 transitions. [2024-11-13 14:25:11,288 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:11,288 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:11,289 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:11,289 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:11,291 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:11,291 INFO L745 eck$LassoCheckResult]: Stem: 140558#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 140292#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 140293#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 142142#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 134626#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 134627#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 136322#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 136323#L783 assume !(0 == getOrigin_~person#1); 136777#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 137910#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 137911#L409 assume !(0 == initPersonOnFloor_~floor#1); 134219#L436 assume !(1 == initPersonOnFloor_~floor#1); 134220#L463 assume !(2 == initPersonOnFloor_~floor#1); 135370#L490 assume 3 == initPersonOnFloor_~floor#1; 135371#L491 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 134066#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 135375#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 135227#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 135273#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 135274#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 142118#L783-1 assume !(0 == getOrigin_~person#1); 133128#L787-1 assume !(1 == getOrigin_~person#1); 133130#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 139203#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 142425#L409-1 assume 0 == initPersonOnFloor_~floor#1; 141443#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 133711#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 139224#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 139712#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 139017#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 139018#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 141953#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 139362#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 134604#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 134605#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 134555#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 134556#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 133681#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 133682#L1942 assume !(0 != timeShift_~tmp___9~2#1); 141297#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 133422#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 133423#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 135844#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 140193#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 140195#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 140535#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 133055#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 134275#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 136501#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 141712#L1730 assume !(1 == ~currentHeading~0); 140850#L1740 assume !(0 == ~currentFloorID~0); 140642#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 140643#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 134987#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 135352#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 135353#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 137119#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 139789#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 133913#L2315-2 [2024-11-13 14:25:11,292 INFO L747 eck$LassoCheckResult]: Loop: 133913#L2315-2 assume !false; 133914#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 140108#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 140109#L2324-2 assume !false; 142147#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 140521#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 133913#L2315-2 [2024-11-13 14:25:11,292 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:11,292 INFO L85 PathProgramCache]: Analyzing trace with hash -1782986348, now seen corresponding path program 1 times [2024-11-13 14:25:11,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:11,292 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [591568554] [2024-11-13 14:25:11,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:11,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:11,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:11,555 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:11,555 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:11,555 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [591568554] [2024-11-13 14:25:11,556 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [591568554] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:11,556 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:11,556 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:25:11,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530654951] [2024-11-13 14:25:11,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:11,556 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:11,556 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:11,557 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 2 times [2024-11-13 14:25:11,557 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:11,557 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788363635] [2024-11-13 14:25:11,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:11,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:11,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:11,575 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:11,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:11,590 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:11,626 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:11,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:11,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:11,627 INFO L87 Difference]: Start difference. First operand 9454 states and 17624 transitions. cyclomatic complexity: 8205 Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:12,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:12,247 INFO L93 Difference]: Finished difference Result 9462 states and 17631 transitions. [2024-11-13 14:25:12,247 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9462 states and 17631 transitions. [2024-11-13 14:25:12,289 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:12,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9462 states to 9462 states and 17631 transitions. [2024-11-13 14:25:12,335 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9424 [2024-11-13 14:25:12,347 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9424 [2024-11-13 14:25:12,347 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9462 states and 17631 transitions. [2024-11-13 14:25:12,359 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:12,359 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9462 states and 17631 transitions. [2024-11-13 14:25:12,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9462 states and 17631 transitions. [2024-11-13 14:25:12,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9462 to 9454. [2024-11-13 14:25:12,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8635498201819336) internal successors, (17618), 9453 states have internal predecessors, (17618), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:12,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17618 transitions. [2024-11-13 14:25:12,528 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2024-11-13 14:25:12,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:25:12,529 INFO L424 stractBuchiCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2024-11-13 14:25:12,530 INFO L331 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-13 14:25:12,530 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17618 transitions. [2024-11-13 14:25:12,564 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:12,565 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:12,565 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:12,566 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:12,566 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:12,566 INFO L745 eck$LassoCheckResult]: Stem: 159483#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 159216#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 159217#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 161066#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 153550#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 153551#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 155247#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 155248#L783 assume !(0 == getOrigin_~person#1); 155701#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 156835#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 156836#L409 assume !(0 == initPersonOnFloor_~floor#1); 153143#L436 assume !(1 == initPersonOnFloor_~floor#1); 153144#L463 assume !(2 == initPersonOnFloor_~floor#1); 154294#L490 assume 3 == initPersonOnFloor_~floor#1; 154295#L491 assume !(0 == initPersonOnFloor_~person#1); 156051#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 152990#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 154299#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 154151#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 154197#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 154198#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 161042#L783-1 assume !(0 == getOrigin_~person#1); 152052#L787-1 assume !(1 == getOrigin_~person#1); 152054#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 158127#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 161349#L409-1 assume 0 == initPersonOnFloor_~floor#1; 160367#L410-2 assume !(0 == initPersonOnFloor_~person#1); 156456#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 152635#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 158150#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 158636#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 157941#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 157942#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 160877#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 158290#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 153528#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 153529#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 153479#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 153480#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 152608#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 152609#L1942 assume !(0 != timeShift_~tmp___9~2#1); 160221#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 152346#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 152347#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 154768#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 159117#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 159119#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 159459#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 151979#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 153199#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 155425#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 160636#L1730 assume !(1 == ~currentHeading~0); 159774#L1740 assume !(0 == ~currentFloorID~0); 159566#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 159567#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 153911#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 154276#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 154277#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 156043#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 158713#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 152837#L2315-2 [2024-11-13 14:25:12,567 INFO L747 eck$LassoCheckResult]: Loop: 152837#L2315-2 assume !false; 152838#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 159032#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 159033#L2324-2 assume !false; 161071#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 159445#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 152837#L2315-2 [2024-11-13 14:25:12,567 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:12,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1217851312, now seen corresponding path program 1 times [2024-11-13 14:25:12,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:12,568 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968951698] [2024-11-13 14:25:12,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:12,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:12,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:12,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:12,751 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:12,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968951698] [2024-11-13 14:25:12,751 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968951698] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:12,751 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:12,751 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:12,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [402202420] [2024-11-13 14:25:12,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:12,752 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:12,752 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:12,754 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 3 times [2024-11-13 14:25:12,754 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:12,754 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703352949] [2024-11-13 14:25:12,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:12,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:12,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:12,765 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:12,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:12,778 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:12,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:12,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:25:12,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:25:12,809 INFO L87 Difference]: Start difference. First operand 9454 states and 17618 transitions. cyclomatic complexity: 8199 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:13,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:13,208 INFO L93 Difference]: Finished difference Result 9458 states and 17621 transitions. [2024-11-13 14:25:13,210 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9458 states and 17621 transitions. [2024-11-13 14:25:13,270 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:13,321 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9458 states to 9458 states and 17621 transitions. [2024-11-13 14:25:13,321 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9420 [2024-11-13 14:25:13,334 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9420 [2024-11-13 14:25:13,335 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9458 states and 17621 transitions. [2024-11-13 14:25:13,354 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:13,354 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2024-11-13 14:25:13,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9458 states and 17621 transitions. [2024-11-13 14:25:13,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9458 to 9458. [2024-11-13 14:25:13,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.8630788750264327) internal successors, (17621), 9457 states have internal predecessors, (17621), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:13,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17621 transitions. [2024-11-13 14:25:13,727 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2024-11-13 14:25:13,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:25:13,728 INFO L424 stractBuchiCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2024-11-13 14:25:13,728 INFO L331 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-13 14:25:13,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17621 transitions. [2024-11-13 14:25:13,759 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:13,759 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:13,759 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:13,760 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:13,760 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:13,761 INFO L745 eck$LassoCheckResult]: Stem: 178404#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 178137#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 178138#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 179987#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 172469#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 172470#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 174166#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 174167#L783 assume !(0 == getOrigin_~person#1); 174620#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 175756#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 175757#L409 assume !(0 == initPersonOnFloor_~floor#1); 172062#L436 assume !(1 == initPersonOnFloor_~floor#1); 172063#L463 assume !(2 == initPersonOnFloor_~floor#1); 173214#L490 assume 3 == initPersonOnFloor_~floor#1; 173215#L491 assume !(0 == initPersonOnFloor_~person#1); 174972#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 171909#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 173218#L201 assume !(0 == callOnFloor_~floorID#1); 175795#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 173070#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 173116#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 173117#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 179963#L783-1 assume !(0 == getOrigin_~person#1); 170974#L787-1 assume !(1 == getOrigin_~person#1); 170976#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 177048#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 180271#L409-1 assume 0 == initPersonOnFloor_~floor#1; 179288#L410-2 assume !(0 == initPersonOnFloor_~person#1); 175377#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 174954#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 180270#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 177557#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 176862#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 176863#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 179799#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 177212#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 172447#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 172448#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 172400#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 172401#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 171527#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 171528#L1942 assume !(0 != timeShift_~tmp___9~2#1); 179142#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 171265#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 171266#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 173687#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 178038#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 178040#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 178380#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 170898#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 172118#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 174344#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 179557#L1730 assume !(1 == ~currentHeading~0); 178695#L1740 assume !(0 == ~currentFloorID~0); 178487#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 178488#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 172830#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 173195#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 173196#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 174964#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 177634#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 171758#L2315-2 [2024-11-13 14:25:13,761 INFO L747 eck$LassoCheckResult]: Loop: 171758#L2315-2 assume !false; 171759#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 177953#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 177954#L2324-2 assume !false; 179992#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 178366#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 171758#L2315-2 [2024-11-13 14:25:13,762 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:13,762 INFO L85 PathProgramCache]: Analyzing trace with hash -690056875, now seen corresponding path program 1 times [2024-11-13 14:25:13,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:13,762 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1231914054] [2024-11-13 14:25:13,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:13,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:13,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:13,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:13,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:13,916 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1231914054] [2024-11-13 14:25:13,916 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1231914054] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:13,916 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:13,916 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:13,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591796668] [2024-11-13 14:25:13,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:13,917 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:13,917 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:13,917 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 4 times [2024-11-13 14:25:13,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:13,918 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072171526] [2024-11-13 14:25:13,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:13,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:13,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:13,931 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:13,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:13,945 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:13,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:13,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:25:13,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:25:13,978 INFO L87 Difference]: Start difference. First operand 9458 states and 17621 transitions. cyclomatic complexity: 8198 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:14,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:14,411 INFO L93 Difference]: Finished difference Result 9464 states and 17626 transitions. [2024-11-13 14:25:14,411 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9464 states and 17626 transitions. [2024-11-13 14:25:14,450 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:14,487 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9464 states to 9464 states and 17626 transitions. [2024-11-13 14:25:14,487 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9426 [2024-11-13 14:25:14,500 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9426 [2024-11-13 14:25:14,500 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9464 states and 17626 transitions. [2024-11-13 14:25:14,501 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:14,502 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2024-11-13 14:25:14,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9464 states and 17626 transitions. [2024-11-13 14:25:14,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9464 to 9464. [2024-11-13 14:25:14,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9464 states, 9464 states have (on average 1.8624260355029585) internal successors, (17626), 9463 states have internal predecessors, (17626), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:14,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9464 states to 9464 states and 17626 transitions. [2024-11-13 14:25:14,645 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2024-11-13 14:25:14,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:25:14,648 INFO L424 stractBuchiCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2024-11-13 14:25:14,648 INFO L331 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-13 14:25:14,649 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9464 states and 17626 transitions. [2024-11-13 14:25:14,684 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:14,684 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:14,684 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:14,685 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:14,685 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:14,685 INFO L745 eck$LassoCheckResult]: Stem: 197334#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 197068#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 197069#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 198918#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 191399#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 191400#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 193095#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 193096#L783 assume !(0 == getOrigin_~person#1); 193548#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 194686#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 194687#L409 assume !(0 == initPersonOnFloor_~floor#1); 190992#L436 assume !(1 == initPersonOnFloor_~floor#1); 190993#L463 assume !(2 == initPersonOnFloor_~floor#1); 192143#L490 assume 3 == initPersonOnFloor_~floor#1; 192144#L491 assume !(0 == initPersonOnFloor_~person#1); 193903#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 190839#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 192148#L201 assume !(0 == callOnFloor_~floorID#1); 194726#L204 assume !(1 == callOnFloor_~floorID#1); 191999#L207 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 192000#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 192046#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 192047#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 198894#L783-1 assume !(0 == getOrigin_~person#1); 189898#L787-1 assume !(1 == getOrigin_~person#1); 189900#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 195979#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 199204#L409-1 assume 0 == initPersonOnFloor_~floor#1; 198219#L410-2 assume !(0 == initPersonOnFloor_~person#1); 194307#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 193885#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 199202#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 196488#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 195791#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 195792#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 198729#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 196138#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 191377#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 191378#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 191328#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 191329#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 190454#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 190455#L1942 assume !(0 != timeShift_~tmp___9~2#1); 198073#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 190194#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 190195#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 192617#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 196969#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 196971#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 197311#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 189827#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 191048#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 193274#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 198488#L1730 assume !(1 == ~currentHeading~0); 197626#L1740 assume !(0 == ~currentFloorID~0); 197418#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 197419#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 191760#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 192125#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 192126#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 193895#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 196565#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 190686#L2315-2 [2024-11-13 14:25:14,686 INFO L747 eck$LassoCheckResult]: Loop: 190686#L2315-2 assume !false; 190687#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 196884#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 196885#L2324-2 assume !false; 198923#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 197297#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 190686#L2315-2 [2024-11-13 14:25:14,686 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:14,689 INFO L85 PathProgramCache]: Analyzing trace with hash 543185589, now seen corresponding path program 1 times [2024-11-13 14:25:14,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:14,689 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684772580] [2024-11-13 14:25:14,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:14,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:14,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:14,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:14,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:14,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684772580] [2024-11-13 14:25:14,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [684772580] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:14,817 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:14,817 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:14,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [895040401] [2024-11-13 14:25:14,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:14,818 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:14,818 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:14,818 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 5 times [2024-11-13 14:25:14,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:14,818 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1787761218] [2024-11-13 14:25:14,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:14,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:14,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:14,828 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:14,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:14,839 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:14,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:14,864 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:25:14,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:25:14,864 INFO L87 Difference]: Start difference. First operand 9464 states and 17626 transitions. cyclomatic complexity: 8197 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:15,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:15,172 INFO L93 Difference]: Finished difference Result 9472 states and 17633 transitions. [2024-11-13 14:25:15,172 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9472 states and 17633 transitions. [2024-11-13 14:25:15,214 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:15,255 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9472 states to 9472 states and 17633 transitions. [2024-11-13 14:25:15,255 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9434 [2024-11-13 14:25:15,263 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9434 [2024-11-13 14:25:15,264 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9472 states and 17633 transitions. [2024-11-13 14:25:15,265 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:15,266 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2024-11-13 14:25:15,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9472 states and 17633 transitions. [2024-11-13 14:25:15,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9472 to 9472. [2024-11-13 14:25:15,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9472 states, 9472 states have (on average 1.8615920608108107) internal successors, (17633), 9471 states have internal predecessors, (17633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:15,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9472 states to 9472 states and 17633 transitions. [2024-11-13 14:25:15,406 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2024-11-13 14:25:15,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:25:15,407 INFO L424 stractBuchiCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2024-11-13 14:25:15,407 INFO L331 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-13 14:25:15,407 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9472 states and 17633 transitions. [2024-11-13 14:25:15,491 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:15,491 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:15,491 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:15,492 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:15,492 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:15,493 INFO L745 eck$LassoCheckResult]: Stem: 216279#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 216013#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 216014#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 217863#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 210342#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 210343#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 212039#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 212040#L783 assume !(0 == getOrigin_~person#1); 212492#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 213630#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 213631#L409 assume !(0 == initPersonOnFloor_~floor#1); 209935#L436 assume !(1 == initPersonOnFloor_~floor#1); 209936#L463 assume !(2 == initPersonOnFloor_~floor#1); 211085#L490 assume 3 == initPersonOnFloor_~floor#1; 211086#L491 assume !(0 == initPersonOnFloor_~person#1); 212847#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 209782#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 211090#L201 assume !(0 == callOnFloor_~floorID#1); 213670#L204 assume !(1 == callOnFloor_~floorID#1); 210942#L207 assume !(2 == callOnFloor_~floorID#1); 210943#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 211629#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 210988#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 210989#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 217839#L783-1 assume !(0 == getOrigin_~person#1); 208841#L787-1 assume !(1 == getOrigin_~person#1); 208843#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 214924#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 218152#L409-1 assume 0 == initPersonOnFloor_~floor#1; 217164#L410-2 assume !(0 == initPersonOnFloor_~person#1); 213251#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 212829#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 218148#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 215433#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 214736#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 214737#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 217674#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 215083#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 210320#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 210321#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 210271#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 210272#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 209397#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 209398#L1942 assume !(0 != timeShift_~tmp___9~2#1); 217018#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 209137#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 209138#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 211560#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 215914#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 215916#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 216256#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 208770#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 209991#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 212218#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 217433#L1730 assume !(1 == ~currentHeading~0); 216571#L1740 assume !(0 == ~currentFloorID~0); 216363#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 216364#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 210703#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 211067#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 211068#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 212839#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 215510#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 209629#L2315-2 [2024-11-13 14:25:15,493 INFO L747 eck$LassoCheckResult]: Loop: 209629#L2315-2 assume !false; 209630#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 215829#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 215830#L2324-2 assume !false; 217868#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 216242#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 209629#L2315-2 [2024-11-13 14:25:15,494 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:15,494 INFO L85 PathProgramCache]: Analyzing trace with hash -2124486886, now seen corresponding path program 1 times [2024-11-13 14:25:15,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:15,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1337044862] [2024-11-13 14:25:15,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:15,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:15,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:15,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:15,751 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:15,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1337044862] [2024-11-13 14:25:15,751 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1337044862] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:15,751 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:15,751 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:25:15,751 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1365048561] [2024-11-13 14:25:15,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:15,753 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:15,753 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:15,753 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 6 times [2024-11-13 14:25:15,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:15,754 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [924978343] [2024-11-13 14:25:15,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:15,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:15,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:15,769 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:15,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:15,786 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:15,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:15,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:15,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:15,817 INFO L87 Difference]: Start difference. First operand 9472 states and 17633 transitions. cyclomatic complexity: 8196 Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:16,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:16,294 INFO L93 Difference]: Finished difference Result 9458 states and 17607 transitions. [2024-11-13 14:25:16,295 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9458 states and 17607 transitions. [2024-11-13 14:25:16,351 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:16,399 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9458 states to 9458 states and 17607 transitions. [2024-11-13 14:25:16,399 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9420 [2024-11-13 14:25:16,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9420 [2024-11-13 14:25:16,409 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9458 states and 17607 transitions. [2024-11-13 14:25:16,411 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:16,411 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2024-11-13 14:25:16,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9458 states and 17607 transitions. [2024-11-13 14:25:16,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9458 to 9458. [2024-11-13 14:25:16,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.86159864664834) internal successors, (17607), 9457 states have internal predecessors, (17607), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:16,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17607 transitions. [2024-11-13 14:25:16,600 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2024-11-13 14:25:16,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:25:16,601 INFO L424 stractBuchiCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2024-11-13 14:25:16,602 INFO L331 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-13 14:25:16,602 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17607 transitions. [2024-11-13 14:25:16,648 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:16,648 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:16,648 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:16,649 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:16,649 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:16,649 INFO L745 eck$LassoCheckResult]: Stem: 235209#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 234944#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 234945#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 236792#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 229280#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 229281#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 230978#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 230979#L783 assume !(0 == getOrigin_~person#1); 231431#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 232564#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 232565#L409 assume !(0 == initPersonOnFloor_~floor#1); 228873#L436 assume !(1 == initPersonOnFloor_~floor#1); 228874#L463 assume !(2 == initPersonOnFloor_~floor#1); 230023#L490 assume 3 == initPersonOnFloor_~floor#1; 230024#L491 assume !(0 == initPersonOnFloor_~person#1); 231783#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 228720#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 230028#L201 assume !(0 == callOnFloor_~floorID#1); 232604#L204 assume !(1 == callOnFloor_~floorID#1); 229880#L207 assume !(2 == callOnFloor_~floorID#1); 229881#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 230568#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 229926#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 229927#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 236768#L783-1 assume !(0 == getOrigin_~person#1); 227779#L787-1 assume !(1 == getOrigin_~person#1); 227780#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 228672#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 228673#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 232747#L436-1 assume 1 == initPersonOnFloor_~floor#1; 232748#L437-2 assume !(0 == initPersonOnFloor_~person#1); 235015#L440-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 231755#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 237078#L201-2 assume !(0 == callOnFloor_~floorID#1); 237075#L204-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 234364#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 233671#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 233672#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 236603#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 234015#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 229258#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 229259#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 229209#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 229210#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 228334#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 228335#L1942 assume !(0 != timeShift_~tmp___9~2#1); 235947#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 228074#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 228075#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 230499#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 234845#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 234847#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 235186#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 227708#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 228929#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 231157#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 236362#L1730 assume !(1 == ~currentHeading~0); 235501#L1740 assume !(0 == ~currentFloorID~0); 235293#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 235294#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 229641#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 230005#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 230006#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 231775#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 234441#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 228566#L2315-2 [2024-11-13 14:25:16,650 INFO L747 eck$LassoCheckResult]: Loop: 228566#L2315-2 assume !false; 228567#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 234760#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 234761#L2324-2 assume !false; 236797#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 235172#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 228566#L2315-2 [2024-11-13 14:25:16,650 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:16,651 INFO L85 PathProgramCache]: Analyzing trace with hash -687220092, now seen corresponding path program 1 times [2024-11-13 14:25:16,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:16,651 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1840567832] [2024-11-13 14:25:16,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:16,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:16,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:16,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:16,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:16,863 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1840567832] [2024-11-13 14:25:16,863 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1840567832] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:16,864 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:16,864 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:25:16,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666215485] [2024-11-13 14:25:16,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:16,864 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:16,865 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:16,865 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 7 times [2024-11-13 14:25:16,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:16,865 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [193054585] [2024-11-13 14:25:16,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:16,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:16,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:16,879 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:16,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:16,888 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:16,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:16,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:16,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:16,918 INFO L87 Difference]: Start difference. First operand 9458 states and 17607 transitions. cyclomatic complexity: 8184 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:17,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:17,381 INFO L93 Difference]: Finished difference Result 9452 states and 17594 transitions. [2024-11-13 14:25:17,381 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9452 states and 17594 transitions. [2024-11-13 14:25:17,439 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:17,489 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9452 states to 9452 states and 17594 transitions. [2024-11-13 14:25:17,490 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9414 [2024-11-13 14:25:17,499 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9414 [2024-11-13 14:25:17,500 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9452 states and 17594 transitions. [2024-11-13 14:25:17,502 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:17,503 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2024-11-13 14:25:17,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9452 states and 17594 transitions. [2024-11-13 14:25:17,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9452 to 9452. [2024-11-13 14:25:17,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.861404993652137) internal successors, (17594), 9451 states have internal predecessors, (17594), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:17,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17594 transitions. [2024-11-13 14:25:17,779 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2024-11-13 14:25:17,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:25:17,780 INFO L424 stractBuchiCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2024-11-13 14:25:17,780 INFO L331 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-13 14:25:17,780 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17594 transitions. [2024-11-13 14:25:17,813 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:17,813 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:17,813 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:17,814 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:17,814 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:17,814 INFO L745 eck$LassoCheckResult]: Stem: 254120#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 253857#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 253858#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 255703#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 248198#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 248199#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 249896#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 249897#L783 assume !(0 == getOrigin_~person#1); 250349#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 251480#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 251481#L409 assume !(0 == initPersonOnFloor_~floor#1); 247791#L436 assume !(1 == initPersonOnFloor_~floor#1); 247792#L463 assume !(2 == initPersonOnFloor_~floor#1); 248941#L490 assume 3 == initPersonOnFloor_~floor#1; 248942#L491 assume !(0 == initPersonOnFloor_~person#1); 250699#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 247638#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 248946#L201 assume !(0 == callOnFloor_~floorID#1); 251520#L204 assume !(1 == callOnFloor_~floorID#1); 248798#L207 assume !(2 == callOnFloor_~floorID#1); 248799#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 249486#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 248844#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 248845#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 255679#L783-1 assume !(0 == getOrigin_~person#1); 246697#L787-1 assume !(1 == getOrigin_~person#1); 246698#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 247590#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 247591#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 251663#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 251664#L463-1 assume 2 == initPersonOnFloor_~floor#1; 253011#L464-2 assume !(0 == initPersonOnFloor_~person#1); 253012#L467-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 252135#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 255991#L201-2 assume !(0 == callOnFloor_~floorID#1); 255990#L204-2 assume !(1 == callOnFloor_~floorID#1); 255989#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 253277#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 252584#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 252585#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 255513#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 252928#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 248176#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 248177#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 248127#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 248128#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 247252#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 247253#L1942 assume !(0 != timeShift_~tmp___9~2#1); 254858#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 246992#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 246993#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 249417#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 253758#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 253760#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 254098#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 246626#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 247847#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 250075#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 255272#L1730 assume !(1 == ~currentHeading~0); 254412#L1740 assume !(0 == ~currentFloorID~0); 254204#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 254205#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 248559#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 248923#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 248924#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 250691#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 253354#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 247484#L2315-2 [2024-11-13 14:25:17,815 INFO L747 eck$LassoCheckResult]: Loop: 247484#L2315-2 assume !false; 247485#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 253673#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 253674#L2324-2 assume !false; 255708#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 254084#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 247484#L2315-2 [2024-11-13 14:25:17,815 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:17,815 INFO L85 PathProgramCache]: Analyzing trace with hash -831097213, now seen corresponding path program 1 times [2024-11-13 14:25:17,815 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:17,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1546340675] [2024-11-13 14:25:17,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:17,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:17,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:17,949 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:17,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:17,950 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1546340675] [2024-11-13 14:25:17,950 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1546340675] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:17,950 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:17,950 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:17,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1242439762] [2024-11-13 14:25:17,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:17,951 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:17,951 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:17,951 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 8 times [2024-11-13 14:25:17,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:17,951 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [931166617] [2024-11-13 14:25:17,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:17,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:17,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:17,962 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:17,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:17,973 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:18,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:18,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:25:18,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:25:18,002 INFO L87 Difference]: Start difference. First operand 9452 states and 17594 transitions. cyclomatic complexity: 8177 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:18,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:18,422 INFO L93 Difference]: Finished difference Result 9468 states and 17606 transitions. [2024-11-13 14:25:18,422 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9468 states and 17606 transitions. [2024-11-13 14:25:18,463 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:18,498 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9468 states to 9468 states and 17606 transitions. [2024-11-13 14:25:18,498 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9430 [2024-11-13 14:25:18,507 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9430 [2024-11-13 14:25:18,507 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9468 states and 17606 transitions. [2024-11-13 14:25:18,514 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:18,514 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9468 states and 17606 transitions. [2024-11-13 14:25:18,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9468 states and 17606 transitions. [2024-11-13 14:25:18,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9468 to 9452. [2024-11-13 14:25:18,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.8605586119339823) internal successors, (17586), 9451 states have internal predecessors, (17586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:18,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17586 transitions. [2024-11-13 14:25:18,788 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2024-11-13 14:25:18,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:25:18,790 INFO L424 stractBuchiCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2024-11-13 14:25:18,790 INFO L331 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-13 14:25:18,790 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17586 transitions. [2024-11-13 14:25:18,823 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2024-11-13 14:25:18,824 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:18,824 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:18,825 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:18,825 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:18,825 INFO L745 eck$LassoCheckResult]: Stem: 273048#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 272784#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 272785#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 274630#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 267124#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 267125#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 268823#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 268824#L783 assume !(0 == getOrigin_~person#1); 269278#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 270407#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 270408#L409 assume !(0 == initPersonOnFloor_~floor#1); 266716#L436 assume !(1 == initPersonOnFloor_~floor#1); 266717#L463 assume !(2 == initPersonOnFloor_~floor#1); 267867#L490 assume 3 == initPersonOnFloor_~floor#1; 267868#L491 assume !(0 == initPersonOnFloor_~person#1); 269626#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 266563#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 267872#L201 assume !(0 == callOnFloor_~floorID#1); 270447#L204 assume !(1 == callOnFloor_~floorID#1); 267724#L207 assume !(2 == callOnFloor_~floorID#1); 267725#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 268413#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 267770#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 267771#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 274606#L783-1 assume !(0 == getOrigin_~person#1); 265626#L787-1 assume !(1 == getOrigin_~person#1); 265627#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 266515#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 266516#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 270590#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 270591#L463-1 assume 2 == initPersonOnFloor_~floor#1; 271938#L464-2 assume !(0 == initPersonOnFloor_~person#1); 271939#L467-2 assume !(1 == initPersonOnFloor_~person#1); 272170#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 271062#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 274928#L201-2 assume !(0 == callOnFloor_~floorID#1); 274927#L204-2 assume !(1 == callOnFloor_~floorID#1); 274926#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 272204#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 271513#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 271514#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 274440#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 271859#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 267102#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 267103#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 267053#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 267054#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 266178#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 266179#L1942 assume !(0 != timeShift_~tmp___9~2#1); 273785#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 265919#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 265920#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 268344#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 272685#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 272687#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 273025#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 265553#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 266772#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 269002#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 274199#L1730 assume !(1 == ~currentHeading~0); 273339#L1740 assume !(0 == ~currentFloorID~0); 273131#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 273132#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 267485#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 267849#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 267850#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 269618#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 272281#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 266409#L2315-2 [2024-11-13 14:25:18,825 INFO L747 eck$LassoCheckResult]: Loop: 266409#L2315-2 assume !false; 266410#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 272600#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 272601#L2324-2 assume !false; 274635#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 273011#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 266409#L2315-2 [2024-11-13 14:25:18,826 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:18,826 INFO L85 PathProgramCache]: Analyzing trace with hash -613336612, now seen corresponding path program 1 times [2024-11-13 14:25:18,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:18,826 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [436138233] [2024-11-13 14:25:18,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:18,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:18,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:18,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:18,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:18,917 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [436138233] [2024-11-13 14:25:18,917 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [436138233] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:18,917 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:18,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:25:18,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [218191985] [2024-11-13 14:25:18,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:18,918 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:18,918 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:18,919 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 9 times [2024-11-13 14:25:18,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:18,920 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [379143322] [2024-11-13 14:25:18,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:18,920 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:18,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:18,928 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:18,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:18,937 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:18,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:18,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:25:18,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:25:18,963 INFO L87 Difference]: Start difference. First operand 9452 states and 17586 transitions. cyclomatic complexity: 8169 Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:19,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:19,920 INFO L93 Difference]: Finished difference Result 17654 states and 32745 transitions. [2024-11-13 14:25:19,921 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17654 states and 32745 transitions. [2024-11-13 14:25:19,999 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2024-11-13 14:25:20,058 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17654 states to 17654 states and 32745 transitions. [2024-11-13 14:25:20,059 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17580 [2024-11-13 14:25:20,074 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17580 [2024-11-13 14:25:20,074 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17654 states and 32745 transitions. [2024-11-13 14:25:20,076 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:20,076 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17654 states and 32745 transitions. [2024-11-13 14:25:20,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17654 states and 32745 transitions. [2024-11-13 14:25:20,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17654 to 17652. [2024-11-13 14:25:20,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17652 states, 17652 states have (on average 1.8549172898255155) internal successors, (32743), 17651 states have internal predecessors, (32743), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:20,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17652 states to 17652 states and 32743 transitions. [2024-11-13 14:25:20,493 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2024-11-13 14:25:20,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:25:20,494 INFO L424 stractBuchiCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2024-11-13 14:25:20,494 INFO L331 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-13 14:25:20,494 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17652 states and 32743 transitions. [2024-11-13 14:25:20,553 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2024-11-13 14:25:20,553 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:20,553 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:20,554 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:20,555 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:20,555 INFO L745 eck$LassoCheckResult]: Stem: 300192#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 299926#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 299927#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 301797#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 294233#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 294234#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 295936#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 295937#L783 assume !(0 == getOrigin_~person#1); 296389#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 297527#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 297528#L409 assume !(0 == initPersonOnFloor_~floor#1); 293825#L436 assume !(1 == initPersonOnFloor_~floor#1); 293826#L463 assume !(2 == initPersonOnFloor_~floor#1); 294978#L490 assume 3 == initPersonOnFloor_~floor#1; 294979#L491 assume !(0 == initPersonOnFloor_~person#1); 296741#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 293672#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 294984#L201 assume !(0 == callOnFloor_~floorID#1); 297567#L204 assume !(1 == callOnFloor_~floorID#1); 294835#L207 assume !(2 == callOnFloor_~floorID#1); 294836#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 295524#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 294880#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 294881#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 301772#L783-1 assume !(0 == getOrigin_~person#1); 292736#L787-1 assume !(1 == getOrigin_~person#1); 292737#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 293624#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 293625#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 297710#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 297711#L463-1 assume 2 == initPersonOnFloor_~floor#1; 299067#L464-2 assume !(0 == initPersonOnFloor_~person#1); 299068#L467-2 assume !(1 == initPersonOnFloor_~person#1); 299301#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 298184#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 302101#L201-2 assume !(0 == callOnFloor_~floorID#1); 302100#L204-2 assume !(1 == callOnFloor_~floorID#1); 302099#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 299335#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 298636#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 298637#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 301602#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 298984#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 294210#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 294211#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 294162#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 294163#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 293288#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 293289#L1942 assume !(0 != timeShift_~tmp___9~2#1); 300935#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 293030#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 293031#L1695 assume !(0 != ~floorButtons_0~0); 301353#L1699 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 295455#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 299826#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 299828#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 300169#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 292665#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 293882#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 296116#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 301355#L1730 assume !(1 == ~currentHeading~0); 300484#L1740 assume !(0 == ~currentFloorID~0); 300276#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 300277#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 294596#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 294960#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 294961#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 296733#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 299412#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 293519#L2315-2 [2024-11-13 14:25:20,556 INFO L747 eck$LassoCheckResult]: Loop: 293519#L2315-2 assume !false; 293520#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 299741#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 299742#L2324-2 assume !false; 301802#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 300154#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 293519#L2315-2 [2024-11-13 14:25:20,556 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:20,556 INFO L85 PathProgramCache]: Analyzing trace with hash 1052748470, now seen corresponding path program 1 times [2024-11-13 14:25:20,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:20,557 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121933711] [2024-11-13 14:25:20,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:20,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:20,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:20,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:20,670 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:20,670 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121933711] [2024-11-13 14:25:20,670 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121933711] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:20,670 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:20,670 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:25:20,670 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1205047547] [2024-11-13 14:25:20,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:20,671 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:20,671 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:20,671 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 10 times [2024-11-13 14:25:20,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:20,671 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92067707] [2024-11-13 14:25:20,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:20,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:20,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:20,683 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:20,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:20,695 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:20,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:20,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:25:20,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:25:20,722 INFO L87 Difference]: Start difference. First operand 17652 states and 32743 transitions. cyclomatic complexity: 15160 Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:21,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:21,881 INFO L93 Difference]: Finished difference Result 33960 states and 62807 transitions. [2024-11-13 14:25:21,881 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33960 states and 62807 transitions. [2024-11-13 14:25:22,042 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2024-11-13 14:25:22,140 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33960 states to 33960 states and 62807 transitions. [2024-11-13 14:25:22,140 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33818 [2024-11-13 14:25:22,170 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33818 [2024-11-13 14:25:22,170 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33960 states and 62807 transitions. [2024-11-13 14:25:22,390 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:22,391 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33960 states and 62807 transitions. [2024-11-13 14:25:22,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33960 states and 62807 transitions. [2024-11-13 14:25:22,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33960 to 33956. [2024-11-13 14:25:22,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33956 states, 33956 states have (on average 1.8495405819295558) internal successors, (62803), 33955 states have internal predecessors, (62803), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:22,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33956 states to 33956 states and 62803 transitions. [2024-11-13 14:25:22,845 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2024-11-13 14:25:22,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:25:22,846 INFO L424 stractBuchiCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2024-11-13 14:25:22,847 INFO L331 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-13 14:25:22,847 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33956 states and 62803 transitions. [2024-11-13 14:25:23,121 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2024-11-13 14:25:23,122 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:23,122 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:23,122 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:23,122 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:23,123 INFO L745 eck$LassoCheckResult]: Stem: 351990#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 351707#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 351708#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 353793#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 345854#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 345855#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 347578#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 347579#L783 assume !(0 == getOrigin_~person#1); 348038#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 349207#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 349208#L409 assume !(0 == initPersonOnFloor_~floor#1); 345446#L436 assume !(1 == initPersonOnFloor_~floor#1); 345447#L463 assume !(2 == initPersonOnFloor_~floor#1); 346607#L490 assume 3 == initPersonOnFloor_~floor#1; 346608#L491 assume !(0 == initPersonOnFloor_~person#1); 348394#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 345292#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 346611#L201 assume !(0 == callOnFloor_~floorID#1); 349247#L204 assume !(1 == callOnFloor_~floorID#1); 346461#L207 assume !(2 == callOnFloor_~floorID#1); 346462#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 347160#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 346506#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 346507#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 353758#L783-1 assume !(0 == getOrigin_~person#1); 344359#L787-1 assume !(1 == getOrigin_~person#1); 344360#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 345245#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 345246#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 349393#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 349394#L463-1 assume 2 == initPersonOnFloor_~floor#1; 350806#L464-2 assume !(0 == initPersonOnFloor_~person#1); 350807#L467-2 assume !(1 == initPersonOnFloor_~person#1); 351050#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 349890#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 350574#L201-2 assume !(0 == callOnFloor_~floorID#1); 354228#L204-2 assume !(1 == callOnFloor_~floorID#1); 354227#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 351088#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 350353#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 350354#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 353564#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 350720#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 345831#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 345832#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 345783#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 345784#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 344908#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 344909#L1942 assume !(0 != timeShift_~tmp___9~2#1); 352797#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 344647#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 344648#L1695 assume !(0 != ~floorButtons_0~0); 353282#L1699 assume !(0 != ~floorButtons_1~0); 353283#L1703 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 347091#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 351597#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 351599#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 351963#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 344283#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 345502#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 347763#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 353284#L1730 assume !(1 == ~currentHeading~0); 352307#L1740 assume !(0 == ~currentFloorID~0); 352081#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 352082#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 346216#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 346587#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 346588#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 348386#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 353211#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 366777#L2315-2 [2024-11-13 14:25:23,123 INFO L747 eck$LassoCheckResult]: Loop: 366777#L2315-2 assume !false; 366775#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 366772#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 366770#L2324-2 assume !false; 366768#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 366769#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 366777#L2315-2 [2024-11-13 14:25:23,123 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:23,123 INFO L85 PathProgramCache]: Analyzing trace with hash -661607647, now seen corresponding path program 1 times [2024-11-13 14:25:23,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:23,123 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1691034926] [2024-11-13 14:25:23,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:23,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:23,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:23,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:23,206 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:23,206 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1691034926] [2024-11-13 14:25:23,206 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1691034926] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:23,206 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:23,206 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:25:23,206 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542973076] [2024-11-13 14:25:23,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:23,206 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:23,207 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:23,207 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 11 times [2024-11-13 14:25:23,207 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:23,207 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827264425] [2024-11-13 14:25:23,207 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:23,207 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:23,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:23,216 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:23,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:23,224 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:23,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:23,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:25:23,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:25:23,249 INFO L87 Difference]: Start difference. First operand 33956 states and 62803 transitions. cyclomatic complexity: 28984 Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 2 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:24,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:24,434 INFO L93 Difference]: Finished difference Result 66364 states and 122378 transitions. [2024-11-13 14:25:24,434 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66364 states and 122378 transitions. [2024-11-13 14:25:24,624 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2024-11-13 14:25:24,966 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66364 states to 66364 states and 122378 transitions. [2024-11-13 14:25:24,966 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66090 [2024-11-13 14:25:25,018 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66090 [2024-11-13 14:25:25,018 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66364 states and 122378 transitions. [2024-11-13 14:25:25,021 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:25,021 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66364 states and 122378 transitions. [2024-11-13 14:25:25,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66364 states and 122378 transitions. [2024-11-13 14:25:25,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66364 to 66356. [2024-11-13 14:25:26,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66356 states, 66356 states have (on average 1.844143709687142) internal successors, (122370), 66355 states have internal predecessors, (122370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:26,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66356 states to 66356 states and 122370 transitions. [2024-11-13 14:25:26,262 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2024-11-13 14:25:26,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:25:26,263 INFO L424 stractBuchiCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2024-11-13 14:25:26,263 INFO L331 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-13 14:25:26,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66356 states and 122370 transitions. [2024-11-13 14:25:26,412 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2024-11-13 14:25:26,412 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:26,412 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:26,413 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:26,413 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:26,413 INFO L745 eck$LassoCheckResult]: Stem: 452414#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 452121#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 452122#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 454308#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 446182#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 446183#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 447906#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 447907#L783 assume !(0 == getOrigin_~person#1); 448362#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 449541#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 449542#L409 assume !(0 == initPersonOnFloor_~floor#1); 445770#L436 assume !(1 == initPersonOnFloor_~floor#1); 445771#L463 assume !(2 == initPersonOnFloor_~floor#1); 446936#L490 assume 3 == initPersonOnFloor_~floor#1; 446937#L491 assume !(0 == initPersonOnFloor_~person#1); 448720#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 445617#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 446940#L201 assume !(0 == callOnFloor_~floorID#1); 449583#L204 assume !(1 == callOnFloor_~floorID#1); 446788#L207 assume !(2 == callOnFloor_~floorID#1); 446789#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 447486#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 446833#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 446834#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 454276#L783-1 assume !(0 == getOrigin_~person#1); 444685#L787-1 assume !(1 == getOrigin_~person#1); 444686#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 445570#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 445571#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 449731#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 449732#L463-1 assume 2 == initPersonOnFloor_~floor#1; 451173#L464-2 assume !(0 == initPersonOnFloor_~person#1); 451174#L467-2 assume !(1 == initPersonOnFloor_~person#1); 451427#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 450241#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 450933#L201-2 assume !(0 == callOnFloor_~floorID#1); 454800#L204-2 assume !(1 == callOnFloor_~floorID#1); 454799#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 451466#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 450707#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 450708#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 454055#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 451089#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 446159#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 446160#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 446113#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 446114#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 445239#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 445240#L1942 assume !(0 != timeShift_~tmp___9~2#1); 453256#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 444974#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 444975#L1695 assume !(0 != ~floorButtons_0~0); 453751#L1699 assume !(0 != ~floorButtons_1~0); 453752#L1703 assume !(0 != ~floorButtons_2~0); 447418#L1707 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 447419#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 452005#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 452007#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 452384#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 444609#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 445828#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 448085#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 453753#L1730 assume !(1 == ~currentHeading~0); 452737#L1740 assume !(0 == ~currentFloorID~0); 452501#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 452502#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 447724#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 465260#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 465261#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 468594#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 468710#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 468711#L2315-2 [2024-11-13 14:25:26,413 INFO L747 eck$LassoCheckResult]: Loop: 468711#L2315-2 assume !false; 468706#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 468707#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 468988#L2324-2 assume !false; 468986#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 468980#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 468711#L2315-2 [2024-11-13 14:25:26,414 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:26,414 INFO L85 PathProgramCache]: Analyzing trace with hash 204541467, now seen corresponding path program 1 times [2024-11-13 14:25:26,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:26,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1327977000] [2024-11-13 14:25:26,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:26,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:26,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:26,492 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:26,492 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:26,492 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1327977000] [2024-11-13 14:25:26,492 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1327977000] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:26,492 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:26,492 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:25:26,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907521433] [2024-11-13 14:25:26,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:26,493 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:26,493 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:26,493 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 12 times [2024-11-13 14:25:26,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:26,493 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1352312274] [2024-11-13 14:25:26,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:26,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:26,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:26,502 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:26,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:26,508 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:26,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:26,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:25:26,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:25:26,534 INFO L87 Difference]: Start difference. First operand 66356 states and 122370 transitions. cyclomatic complexity: 56287 Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 2 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:28,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:28,160 INFO L93 Difference]: Finished difference Result 130740 states and 240369 transitions. [2024-11-13 14:25:28,160 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130740 states and 240369 transitions. [2024-11-13 14:25:28,854 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2024-11-13 14:25:29,147 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130740 states to 130740 states and 240369 transitions. [2024-11-13 14:25:29,147 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130210 [2024-11-13 14:25:29,493 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130210 [2024-11-13 14:25:29,493 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130740 states and 240369 transitions. [2024-11-13 14:25:29,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:29,494 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130740 states and 240369 transitions. [2024-11-13 14:25:29,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130740 states and 240369 transitions. [2024-11-13 14:25:30,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130740 to 130724. [2024-11-13 14:25:31,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130724 states, 130724 states have (on average 1.8386294789021145) internal successors, (240353), 130723 states have internal predecessors, (240353), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:31,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130724 states to 130724 states and 240353 transitions. [2024-11-13 14:25:31,330 INFO L240 hiAutomatonCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2024-11-13 14:25:31,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:25:31,330 INFO L424 stractBuchiCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2024-11-13 14:25:31,330 INFO L331 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-13 14:25:31,330 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130724 states and 240353 transitions. [2024-11-13 14:25:32,082 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2024-11-13 14:25:32,082 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:32,082 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:32,083 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:32,083 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:32,084 INFO L745 eck$LassoCheckResult]: Stem: 649567#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 649268#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 649269#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 651488#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 643278#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 643279#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 645014#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 645015#L783 assume !(0 == getOrigin_~person#1); 645476#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 646669#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 646670#L409 assume !(0 == initPersonOnFloor_~floor#1); 642869#L436 assume !(1 == initPersonOnFloor_~floor#1); 642870#L463 assume !(2 == initPersonOnFloor_~floor#1); 644033#L490 assume 3 == initPersonOnFloor_~floor#1; 644034#L491 assume !(0 == initPersonOnFloor_~person#1); 645844#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 642714#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 644037#L201 assume !(0 == callOnFloor_~floorID#1); 646710#L204 assume !(1 == callOnFloor_~floorID#1); 643885#L207 assume !(2 == callOnFloor_~floorID#1); 643886#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 644584#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 643930#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 643931#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 651456#L783-1 assume !(0 == getOrigin_~person#1); 641786#L787-1 assume !(1 == getOrigin_~person#1); 641787#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 642667#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 642668#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 646860#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 646861#L463-1 assume 2 == initPersonOnFloor_~floor#1; 648309#L464-2 assume !(0 == initPersonOnFloor_~person#1); 648310#L467-2 assume !(1 == initPersonOnFloor_~person#1); 648570#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 647366#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 648072#L201-2 assume !(0 == callOnFloor_~floorID#1); 652014#L204-2 assume !(1 == callOnFloor_~floorID#1); 652013#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 648604#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 647842#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 647843#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 651251#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 648223#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 643255#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 643256#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 643209#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 643210#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 642337#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 642338#L1942 assume !(0 != timeShift_~tmp___9~2#1); 650435#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 642074#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 642075#L1695 assume !(0 != ~floorButtons_0~0); 650947#L1699 assume !(0 != ~floorButtons_1~0); 650948#L1703 assume !(0 != ~floorButtons_2~0); 644517#L1707 assume !(0 != ~floorButtons_3~0); 644518#L1711 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~16#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 650062#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 649149#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 649151#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 649540#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 641711#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 642926#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 645196#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 650949#L1730 assume !(1 == ~currentHeading~0); 649901#L1740 assume !(0 == ~currentFloorID~0); 649658#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 649659#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 644827#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 679897#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 679898#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 679926#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 679923#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 679924#L2315-2 [2024-11-13 14:25:32,084 INFO L747 eck$LassoCheckResult]: Loop: 679924#L2315-2 assume !false; 679919#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 679920#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 680066#L2324-2 assume !false; 680058#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 680056#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 679924#L2315-2 [2024-11-13 14:25:32,084 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:32,084 INFO L85 PathProgramCache]: Analyzing trace with hash -2126373784, now seen corresponding path program 1 times [2024-11-13 14:25:32,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:32,084 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950101883] [2024-11-13 14:25:32,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:32,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:32,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:32,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:32,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:32,238 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950101883] [2024-11-13 14:25:32,239 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950101883] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:32,239 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:32,239 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:25:32,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790392007] [2024-11-13 14:25:32,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:32,239 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:32,239 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:32,240 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 13 times [2024-11-13 14:25:32,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:32,240 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791178749] [2024-11-13 14:25:32,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:32,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:32,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:32,249 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:32,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:32,257 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:32,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:32,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:32,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:32,284 INFO L87 Difference]: Start difference. First operand 130724 states and 240353 transitions. cyclomatic complexity: 110174 Second operand has 5 states, 5 states have (on average 14.4) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:34,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:34,303 INFO L93 Difference]: Finished difference Result 219222 states and 401951 transitions. [2024-11-13 14:25:34,304 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 219222 states and 401951 transitions. [2024-11-13 14:25:35,632 INFO L131 ngComponentsAnalysis]: Automaton has 905 accepting balls. 68350 [2024-11-13 14:25:36,335 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 219222 states to 219222 states and 401951 transitions. [2024-11-13 14:25:36,335 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 218670 [2024-11-13 14:25:36,987 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 218670 [2024-11-13 14:25:36,987 INFO L73 IsDeterministic]: Start isDeterministic. Operand 219222 states and 401951 transitions. [2024-11-13 14:25:36,988 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:36,988 INFO L218 hiAutomatonCegarLoop]: Abstraction has 219222 states and 401951 transitions. [2024-11-13 14:25:37,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219222 states and 401951 transitions. [2024-11-13 14:25:38,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219222 to 219124. [2024-11-13 14:25:39,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219124 states, 219124 states have (on average 1.8336832113323962) internal successors, (401804), 219123 states have internal predecessors, (401804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:40,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219124 states to 219124 states and 401804 transitions. [2024-11-13 14:25:40,257 INFO L240 hiAutomatonCegarLoop]: Abstraction has 219124 states and 401804 transitions. [2024-11-13 14:25:40,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:25:40,258 INFO L424 stractBuchiCegarLoop]: Abstraction has 219124 states and 401804 transitions. [2024-11-13 14:25:40,258 INFO L331 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-13 14:25:40,258 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 219124 states and 401804 transitions. [2024-11-13 14:25:41,442 INFO L131 ngComponentsAnalysis]: Automaton has 905 accepting balls. 68318 [2024-11-13 14:25:41,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:25:41,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:25:41,443 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:25:41,443 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:25:41,444 INFO L745 eck$LassoCheckResult]: Stem: 999491#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 999195#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 999196#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1001464#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 993205#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 993206#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 994922#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 994923#L783 assume !(0 == getOrigin_~person#1); 995387#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 996576#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 996577#L409 assume !(0 == initPersonOnFloor_~floor#1); 992805#L436 assume !(1 == initPersonOnFloor_~floor#1); 992806#L463 assume !(2 == initPersonOnFloor_~floor#1); 993949#L490 assume 3 == initPersonOnFloor_~floor#1; 993950#L491 assume !(0 == initPersonOnFloor_~person#1); 995746#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 992652#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 993954#L201 assume !(0 == callOnFloor_~floorID#1); 996619#L204 assume !(1 == callOnFloor_~floorID#1); 993803#L207 assume !(2 == callOnFloor_~floorID#1); 993804#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 994502#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 993848#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 993849#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1001433#L783-1 assume !(0 == getOrigin_~person#1); 991733#L787-1 assume !(1 == getOrigin_~person#1); 991734#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 992605#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 992606#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 996771#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 996772#L463-1 assume 2 == initPersonOnFloor_~floor#1; 998231#L464-2 assume !(0 == initPersonOnFloor_~person#1); 998232#L467-2 assume !(1 == initPersonOnFloor_~person#1); 998482#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 997277#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1002422#L201-2 assume !(0 == callOnFloor_~floorID#1); 1002421#L204-2 assume !(1 == callOnFloor_~floorID#1); 1002420#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 998520#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 997751#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 997752#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1001213#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 998139#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 993185#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 993186#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 993138#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 993139#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 992279#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 992280#L1942 assume !(0 != timeShift_~tmp___9~2#1); 1000359#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 992021#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 992022#L1695 assume !(0 != ~floorButtons_0~0); 1000900#L1699 assume !(0 != ~floorButtons_1~0); 1000901#L1703 assume !(0 != ~floorButtons_2~0); 994432#L1707 assume !(0 != ~floorButtons_3~0); 994433#L1711 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~16#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 999988#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 999074#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 999076#L1315-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 999466#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1; 1001410#L1319-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 994104#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 992861#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 995113#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1000902#L1730 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1000903#isTopFloor_returnLabel#4 continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 1001042#L1734 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 1001043#L1740-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1002119#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1002101#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 1002093#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 1002094#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1002099#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 1002195#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1002194#L2315-2 [2024-11-13 14:25:41,444 INFO L747 eck$LassoCheckResult]: Loop: 1002194#L2315-2 assume !false; 1002193#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1002192#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1002191#L2324-2 assume !false; 1002189#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1002190#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1002194#L2315-2 [2024-11-13 14:25:41,445 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:41,445 INFO L85 PathProgramCache]: Analyzing trace with hash -652917152, now seen corresponding path program 1 times [2024-11-13 14:25:41,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:41,445 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [611238939] [2024-11-13 14:25:41,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:41,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:41,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:25:41,605 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:25:41,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:25:41,605 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [611238939] [2024-11-13 14:25:41,606 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [611238939] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:25:41,606 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:25:41,606 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:25:41,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [35276029] [2024-11-13 14:25:41,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:25:41,606 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:25:41,607 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:25:41,607 INFO L85 PathProgramCache]: Analyzing trace with hash -584273110, now seen corresponding path program 14 times [2024-11-13 14:25:41,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:25:41,607 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399161917] [2024-11-13 14:25:41,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:25:41,607 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:25:41,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:41,621 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:25:41,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:25:41,628 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:25:41,655 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:25:41,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:25:41,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:25:41,655 INFO L87 Difference]: Start difference. First operand 219124 states and 401804 transitions. cyclomatic complexity: 183619 Second operand has 5 states, 5 states have (on average 14.8) internal successors, (74), 5 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:25:44,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:25:44,590 INFO L93 Difference]: Finished difference Result 220150 states and 402830 transitions. [2024-11-13 14:25:44,590 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 220150 states and 402830 transitions. [2024-11-13 14:25:45,346 INFO L131 ngComponentsAnalysis]: Automaton has 905 accepting balls. 68606 [2024-11-13 14:25:46,446 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 220150 states to 220150 states and 402830 transitions. [2024-11-13 14:25:46,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 219598 [2024-11-13 14:25:46,595 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 219598 [2024-11-13 14:25:46,595 INFO L73 IsDeterministic]: Start isDeterministic. Operand 220150 states and 402830 transitions. [2024-11-13 14:25:46,596 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:25:46,596 INFO L218 hiAutomatonCegarLoop]: Abstraction has 220150 states and 402830 transitions. [2024-11-13 14:25:46,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220150 states and 402830 transitions.