./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 08186622cd76fd4d6a6b5312f0089e39f8e95b17 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 08:43:29,566 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 08:43:29,567 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 08:43:29,574 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 08:43:29,574 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 08:43:29,574 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 08:43:29,575 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 08:43:29,576 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 08:43:29,577 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 08:43:29,578 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 08:43:29,578 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 08:43:29,578 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 08:43:29,579 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 08:43:29,580 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 08:43:29,581 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 08:43:29,581 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 08:43:29,582 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 08:43:29,583 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 08:43:29,584 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 08:43:29,585 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 08:43:29,586 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 08:43:29,587 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 08:43:29,588 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 08:43:29,588 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 08:43:29,588 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 08:43:29,589 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 08:43:29,590 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 08:43:29,590 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 08:43:29,591 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 08:43:29,592 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 08:43:29,592 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 08:43:29,592 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 08:43:29,592 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 08:43:29,593 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 08:43:29,593 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 08:43:29,594 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 08:43:29,594 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 08:43:29,604 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 08:43:29,604 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 08:43:29,605 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 08:43:29,605 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 08:43:29,605 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 08:43:29,606 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 08:43:29,606 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 08:43:29,606 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 08:43:29,607 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 08:43:29,608 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 08:43:29,608 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 08:43:29,609 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 08:43:29,609 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 08:43:29,609 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 08:43:29,610 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 08:43:29,610 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 08186622cd76fd4d6a6b5312f0089e39f8e95b17 [2018-11-18 08:43:29,629 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 08:43:29,637 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 08:43:29,640 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 08:43:29,641 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 08:43:29,641 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 08:43:29,642 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-18 08:43:29,675 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/data/f76e994ac/f89f6a3dbe4340d4906e3614856c91bd/FLAG630edb8ee [2018-11-18 08:43:30,141 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 08:43:30,142 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-18 08:43:30,157 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/data/f76e994ac/f89f6a3dbe4340d4906e3614856c91bd/FLAG630edb8ee [2018-11-18 08:43:30,668 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/data/f76e994ac/f89f6a3dbe4340d4906e3614856c91bd [2018-11-18 08:43:30,671 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 08:43:30,672 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 08:43:30,672 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 08:43:30,672 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 08:43:30,675 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 08:43:30,676 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:43:30" (1/1) ... [2018-11-18 08:43:30,677 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@209e89ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:30, skipping insertion in model container [2018-11-18 08:43:30,677 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:43:30" (1/1) ... [2018-11-18 08:43:30,684 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 08:43:30,728 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 08:43:31,102 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 08:43:31,112 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 08:43:31,193 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 08:43:31,232 INFO L195 MainTranslator]: Completed translation [2018-11-18 08:43:31,232 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31 WrapperNode [2018-11-18 08:43:31,233 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 08:43:31,233 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 08:43:31,233 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 08:43:31,233 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 08:43:31,241 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,260 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,348 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 08:43:31,348 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 08:43:31,348 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 08:43:31,348 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 08:43:31,356 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,357 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,369 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,369 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,405 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,437 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,450 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... [2018-11-18 08:43:31,469 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 08:43:31,469 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 08:43:31,469 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 08:43:31,469 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 08:43:31,470 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:43:31,526 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 08:43:31,527 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 08:43:31,527 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 08:43:35,601 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 08:43:35,602 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:43:35 BoogieIcfgContainer [2018-11-18 08:43:35,602 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 08:43:35,602 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 08:43:35,602 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 08:43:35,605 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 08:43:35,605 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 08:43:35,605 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 08:43:30" (1/3) ... [2018-11-18 08:43:35,606 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4fc2e542 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 08:43:35, skipping insertion in model container [2018-11-18 08:43:35,606 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 08:43:35,606 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:43:31" (2/3) ... [2018-11-18 08:43:35,607 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4fc2e542 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 08:43:35, skipping insertion in model container [2018-11-18 08:43:35,607 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 08:43:35,607 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:43:35" (3/3) ... [2018-11-18 08:43:35,608 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-18 08:43:35,643 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 08:43:35,643 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 08:43:35,644 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 08:43:35,644 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 08:43:35,644 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 08:43:35,644 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 08:43:35,644 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 08:43:35,644 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 08:43:35,644 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 08:43:35,679 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2580 states. [2018-11-18 08:43:35,730 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1274 [2018-11-18 08:43:35,730 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:35,731 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:35,740 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:35,740 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:35,741 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 08:43:35,741 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2580 states. [2018-11-18 08:43:35,754 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1274 [2018-11-18 08:43:35,754 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:35,755 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:35,756 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:35,757 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:35,761 INFO L794 eck$LassoCheckResult]: Stem: 542#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1660#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1494#L1855true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1684#L1848true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2302#L1863true main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1689#L1143true assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 2258#L1115true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1999#L59true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1319#L250true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2390#L275true bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 117#L1525true assume 0 == initPersonOnFloor_~floor; 1259#L1526true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1462#L1633-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1840#L1317true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2553#L1329-2true assume { :end_inline_callOnFloor } true; 1866#L1669true assume { :end_inline_initPersonOnFloor } true; 832#L919true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 442#L1254true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1435#L1281true stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1974#L2727true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2526#L2739true timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2179#L2875true assume !(0 != timeShift_~tmp___9~2); 2001#L2966true assume !(1 == ~doorState~0); 1991#L2966-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 101#L2318true assume !(1 == stopRequestedInDirection_~dir); 445#L2487true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1905#L2640true timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 180#L2974true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2575#L2694true assume !(1 == ~currentHeading~0); 625#L2704true assume !(0 == ~currentFloorID~0); 620#L2704-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 175#L2710-1true assume { :end_inline_continueInDirection } true; 1179#L2983-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1726#L2114true __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2097#L2174-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1407#L2206-6true __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2249#L102true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 386#L112-1true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1586#L2998true assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 523#L947-3true [2018-11-18 08:43:35,762 INFO L796 eck$LassoCheckResult]: Loop: 523#L947-3true assume true; 516#L947-1true assume !false; 179#L948true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 18#L951true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1796#L1937true cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1315#L955true assume 1 != cleanup_~tmp___0~3; 1318#L955-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 568#L1254-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1389#L1281-21true anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 463#L2222true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1810#L2286true isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2356#L2299true cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1686#L967true assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 558#L1254-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1509#L1281-26true stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1977#L2727-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2527#L2739-1true timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2165#L2875-2true assume !(0 != timeShift_~tmp___9~2); 1990#L2966-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1995#L2966-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 107#L2318-2true assume !(1 == stopRequestedInDirection_~dir); 449#L2487-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1886#L2640-2true timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 185#L2974-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2556#L2694-3true assume !(1 == ~currentHeading~0); 613#L2704-9true assume !(0 == ~currentFloorID~0); 619#L2704-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 166#L2710-7true assume { :end_inline_continueInDirection } true; 1169#L2983-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1732#L2114-1true __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2086#L2174-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1399#L2206-13true __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2262#L102-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 419#L112-3true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1590#L2998-1true assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 523#L947-3true [2018-11-18 08:43:35,766 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:35,771 INFO L82 PathProgramCache]: Analyzing trace with hash -879037126, now seen corresponding path program 1 times [2018-11-18 08:43:35,773 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:35,774 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:35,806 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:35,806 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:35,806 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:35,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:36,595 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:36,597 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:36,597 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:36,600 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:36,601 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:36,601 INFO L82 PathProgramCache]: Analyzing trace with hash 1299122158, now seen corresponding path program 1 times [2018-11-18 08:43:36,601 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:36,601 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:36,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:36,602 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:36,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:36,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:36,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:36,636 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:36,636 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:43:36,637 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:36,651 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:43:36,652 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:43:36,653 INFO L87 Difference]: Start difference. First operand 2580 states. Second operand 4 states. [2018-11-18 08:43:36,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:36,855 INFO L93 Difference]: Finished difference Result 4511 states and 8400 transitions. [2018-11-18 08:43:36,855 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:43:36,857 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4511 states and 8400 transitions. [2018-11-18 08:43:36,887 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2258 [2018-11-18 08:43:36,914 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4511 states to 4475 states and 8359 transitions. [2018-11-18 08:43:36,915 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4475 [2018-11-18 08:43:36,921 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4475 [2018-11-18 08:43:36,921 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4475 states and 8359 transitions. [2018-11-18 08:43:36,932 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:36,932 INFO L705 BuchiCegarLoop]: Abstraction has 4475 states and 8359 transitions. [2018-11-18 08:43:36,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4475 states and 8359 transitions. [2018-11-18 08:43:37,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4475 to 2561. [2018-11-18 08:43:37,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2561 states. [2018-11-18 08:43:37,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2561 states to 2561 states and 4782 transitions. [2018-11-18 08:43:37,021 INFO L728 BuchiCegarLoop]: Abstraction has 2561 states and 4782 transitions. [2018-11-18 08:43:37,021 INFO L608 BuchiCegarLoop]: Abstraction has 2561 states and 4782 transitions. [2018-11-18 08:43:37,021 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 08:43:37,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2561 states and 4782 transitions. [2018-11-18 08:43:37,033 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1276 [2018-11-18 08:43:37,033 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:37,033 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:37,035 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:37,035 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:37,036 INFO L794 eck$LassoCheckResult]: Stem: 8054#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8055#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 9000#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9001#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 9209#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 9212#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 9213#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 9376#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 8830#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 8462#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7424#L1525 assume 0 == initPersonOnFloor_~floor; 7425#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7112#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8959#L1317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9008#L1329-2 assume { :end_inline_callOnFloor } true; 9361#L1669 assume { :end_inline_initPersonOnFloor } true; 8420#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7953#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7815#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 8911#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 8131#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7760#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 8427#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 8942#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9665#L2875 assume !(0 != timeShift_~tmp___9~2); 9378#L2966 assume !(1 == ~doorState~0); 9371#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 7385#L2318 assume !(1 == stopRequestedInDirection_~dir); 7386#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 7215#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 7533#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 7534#L2694 assume !(1 == ~currentHeading~0); 8130#L2704 assume !(0 == ~currentFloorID~0); 8125#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7528#L2710-1 assume { :end_inline_continueInDirection } true; 7438#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 8803#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9261#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 7914#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 8872#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 7158#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 7882#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 8037#L947-3 [2018-11-18 08:43:37,036 INFO L796 eck$LassoCheckResult]: Loop: 8037#L947-3 assume true; 8029#L947-1 assume !false; 7532#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 7149#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 7150#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 8828#L955 assume 1 != cleanup_~tmp___0~3; 8829#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 8076#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7334#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 7973#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7918#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 9330#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 9211#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 8069#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7287#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 9013#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 8133#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7783#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 8426#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 8948#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9664#L2875-2 assume !(0 != timeShift_~tmp___9~2); 9369#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9370#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 7400#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 7401#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 7227#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 7544#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 7546#L2694-3 assume !(1 == ~currentHeading~0); 8118#L2704-9 assume !(0 == ~currentFloorID~0); 8119#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7514#L2710-7 assume { :end_inline_continueInDirection } true; 7431#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 8788#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9267#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 7844#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 8864#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 7144#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 7934#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 8037#L947-3 [2018-11-18 08:43:37,036 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:37,037 INFO L82 PathProgramCache]: Analyzing trace with hash 1977724217, now seen corresponding path program 1 times [2018-11-18 08:43:37,037 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:37,037 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:37,037 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:37,038 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:37,038 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:37,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:37,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:37,791 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:37,792 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:37,792 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:37,792 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:37,792 INFO L82 PathProgramCache]: Analyzing trace with hash -785142981, now seen corresponding path program 1 times [2018-11-18 08:43:37,792 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:37,792 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:37,796 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:37,796 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:37,796 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:37,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:37,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:37,847 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:37,847 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 08:43:37,847 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:37,847 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 08:43:37,847 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 08:43:37,848 INFO L87 Difference]: Start difference. First operand 2561 states and 4782 transitions. cyclomatic complexity: 2222 Second operand 7 states. [2018-11-18 08:43:43,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:43,921 INFO L93 Difference]: Finished difference Result 24340 states and 45328 transitions. [2018-11-18 08:43:43,921 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-18 08:43:43,922 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24340 states and 45328 transitions. [2018-11-18 08:43:44,024 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16123 [2018-11-18 08:43:44,113 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24340 states to 24340 states and 45328 transitions. [2018-11-18 08:43:44,114 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24340 [2018-11-18 08:43:44,135 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24340 [2018-11-18 08:43:44,136 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24340 states and 45328 transitions. [2018-11-18 08:43:44,162 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:44,162 INFO L705 BuchiCegarLoop]: Abstraction has 24340 states and 45328 transitions. [2018-11-18 08:43:44,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24340 states and 45328 transitions. [2018-11-18 08:43:44,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24340 to 5074. [2018-11-18 08:43:44,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5074 states. [2018-11-18 08:43:44,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5074 states to 5074 states and 9471 transitions. [2018-11-18 08:43:44,327 INFO L728 BuchiCegarLoop]: Abstraction has 5074 states and 9471 transitions. [2018-11-18 08:43:44,327 INFO L608 BuchiCegarLoop]: Abstraction has 5074 states and 9471 transitions. [2018-11-18 08:43:44,327 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 08:43:44,327 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5074 states and 9471 transitions. [2018-11-18 08:43:44,342 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2558 [2018-11-18 08:43:44,342 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:44,342 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:44,344 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:44,344 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:44,344 INFO L794 eck$LassoCheckResult]: Stem: 35027#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 35028#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 36039#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 36040#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 36261#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 36265#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 36266#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 36463#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 35852#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 35470#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 34372#L1525 assume 0 == initPersonOnFloor_~floor; 34373#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 34060#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 35995#L1317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 36408#L1329-2 assume { :end_inline_callOnFloor } true; 36428#L1669 assume { :end_inline_initPersonOnFloor } true; 36429#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 34916#L1254 assume !(0 == isFloorCalling_~floorID); 34918#L1258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 36924#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 36923#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 36921#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 36917#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 36916#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 36915#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 36913#L2875 assume !(0 != timeShift_~tmp___9~2); 36912#L2966 assume !(1 == ~doorState~0); 36911#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 36909#L2318 assume !(1 == stopRequestedInDirection_~dir); 34921#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 34163#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 34482#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 34483#L2694 assume !(1 == ~currentHeading~0); 36804#L2704 assume !(0 == ~currentFloorID~0); 35116#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35117#L2710-1 assume { :end_inline_continueInDirection } true; 36885#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 36884#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 36883#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 36877#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 36873#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 36863#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 36862#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 36860#L947-3 [2018-11-18 08:43:44,344 INFO L796 eck$LassoCheckResult]: Loop: 36860#L947-3 assume true; 36859#L947-1 assume !false; 36858#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 36857#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 36856#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 36855#L955 assume 1 != cleanup_~tmp___0~3; 36832#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 35055#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 35056#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 36825#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 36811#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 36810#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 36809#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 35044#L1254-26 assume !(0 == isFloorCalling_~floorID); 35046#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 38062#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 38061#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 38059#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38055#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 38054#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 38053#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 38051#L2875-2 assume !(0 != timeShift_~tmp___9~2); 38050#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 38049#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 38047#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 38026#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 38024#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 34493#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 34495#L2694-3 assume !(1 == ~currentHeading~0); 38020#L2704-9 assume !(0 == ~currentFloorID~0); 35114#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35115#L2710-7 assume { :end_inline_continueInDirection } true; 38018#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 38017#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 38015#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 38010#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 38002#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 37996#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 36861#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 36860#L947-3 [2018-11-18 08:43:44,345 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:44,345 INFO L82 PathProgramCache]: Analyzing trace with hash -2144870048, now seen corresponding path program 1 times [2018-11-18 08:43:44,345 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:44,345 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:44,346 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:44,346 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:44,346 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:44,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:45,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:45,108 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:45,108 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:45,108 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:45,108 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:45,109 INFO L82 PathProgramCache]: Analyzing trace with hash 921683860, now seen corresponding path program 1 times [2018-11-18 08:43:45,109 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:45,109 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:45,109 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:45,109 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:45,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:45,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:45,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:45,144 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:45,144 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:43:45,145 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:45,145 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:43:45,145 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:43:45,145 INFO L87 Difference]: Start difference. First operand 5074 states and 9471 transitions. cyclomatic complexity: 4398 Second operand 5 states. [2018-11-18 08:43:48,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:48,575 INFO L93 Difference]: Finished difference Result 17953 states and 33464 transitions. [2018-11-18 08:43:48,575 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:43:48,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17953 states and 33464 transitions. [2018-11-18 08:43:48,636 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9642 [2018-11-18 08:43:48,683 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17953 states to 17953 states and 33464 transitions. [2018-11-18 08:43:48,683 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17953 [2018-11-18 08:43:48,696 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17953 [2018-11-18 08:43:48,696 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17953 states and 33464 transitions. [2018-11-18 08:43:48,710 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:48,710 INFO L705 BuchiCegarLoop]: Abstraction has 17953 states and 33464 transitions. [2018-11-18 08:43:48,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17953 states and 33464 transitions. [2018-11-18 08:43:48,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17953 to 9186. [2018-11-18 08:43:48,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9186 states. [2018-11-18 08:43:48,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9186 states to 9186 states and 17120 transitions. [2018-11-18 08:43:48,842 INFO L728 BuchiCegarLoop]: Abstraction has 9186 states and 17120 transitions. [2018-11-18 08:43:48,842 INFO L608 BuchiCegarLoop]: Abstraction has 9186 states and 17120 transitions. [2018-11-18 08:43:48,842 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 08:43:48,843 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9186 states and 17120 transitions. [2018-11-18 08:43:48,866 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4667 [2018-11-18 08:43:48,866 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:48,866 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:48,869 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:48,869 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:48,869 INFO L794 eck$LassoCheckResult]: Stem: 58078#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 58079#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 59072#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 59073#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 59287#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 59290#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 59291#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 59470#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 58893#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 58511#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 57421#L1525 assume 0 == initPersonOnFloor_~floor; 57422#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 57108#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 59028#L1317 assume !(0 == callOnFloor_~floorID); 59262#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 59082#L1329-2 assume { :end_inline_callOnFloor } true; 59789#L1669 assume { :end_inline_initPersonOnFloor } true; 58464#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 58465#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 59805#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 59808#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 59807#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 57765#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 58472#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 59011#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 66078#L2875 assume !(0 != timeShift_~tmp___9~2); 59472#L2966 assume !(1 == ~doorState~0); 59465#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 57382#L2318 assume !(1 == stopRequestedInDirection_~dir); 57383#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 66148#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 66218#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 59794#L2694 assume !(1 == ~currentHeading~0); 59795#L2704 assume !(0 == ~currentFloorID~0); 58159#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57527#L2710-1 assume { :end_inline_continueInDirection } true; 57435#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 58866#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 59910#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 59904#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 59893#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 59870#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 59868#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 59866#L947-3 [2018-11-18 08:43:48,869 INFO L796 eck$LassoCheckResult]: Loop: 59866#L947-3 assume true; 59865#L947-1 assume !false; 59864#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 59863#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 59862#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 59861#L955 assume 1 != cleanup_~tmp___0~3; 59860#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 59859#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 59841#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 59832#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 59821#L2226 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 59816#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 59815#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 59814#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 59812#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 59811#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 59810#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 59809#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 57788#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 58471#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 59017#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 64840#L2875-2 assume !(0 != timeShift_~tmp___9~2); 59463#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 59464#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 57397#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 57398#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 57223#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 57543#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 57545#L2694-3 assume !(1 == ~currentHeading~0); 59790#L2704-9 assume !(0 == ~currentFloorID~0); 58152#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58158#L2710-7 assume { :end_inline_continueInDirection } true; 59912#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 59911#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 59902#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 59897#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 59876#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 59869#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 59867#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 59866#L947-3 [2018-11-18 08:43:48,869 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:48,869 INFO L82 PathProgramCache]: Analyzing trace with hash 1422855594, now seen corresponding path program 1 times [2018-11-18 08:43:48,870 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:48,870 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:48,870 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:48,870 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:48,870 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:48,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:49,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:49,558 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:49,558 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:49,558 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:49,558 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:49,558 INFO L82 PathProgramCache]: Analyzing trace with hash 309456663, now seen corresponding path program 1 times [2018-11-18 08:43:49,558 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:49,558 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:49,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:49,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:49,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:49,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:49,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:49,583 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:49,583 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:43:49,583 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:49,583 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:43:49,583 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:43:49,583 INFO L87 Difference]: Start difference. First operand 9186 states and 17120 transitions. cyclomatic complexity: 7935 Second operand 5 states. [2018-11-18 08:43:51,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:51,270 INFO L93 Difference]: Finished difference Result 36805 states and 68599 transitions. [2018-11-18 08:43:51,270 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:43:51,271 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 36805 states and 68599 transitions. [2018-11-18 08:43:51,367 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24746 [2018-11-18 08:43:51,457 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 36805 states to 36805 states and 68599 transitions. [2018-11-18 08:43:51,457 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36805 [2018-11-18 08:43:51,481 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36805 [2018-11-18 08:43:51,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36805 states and 68599 transitions. [2018-11-18 08:43:51,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:51,518 INFO L705 BuchiCegarLoop]: Abstraction has 36805 states and 68599 transitions. [2018-11-18 08:43:51,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36805 states and 68599 transitions. [2018-11-18 08:43:51,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36805 to 16563. [2018-11-18 08:43:51,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16563 states. [2018-11-18 08:43:51,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16563 states to 16563 states and 30874 transitions. [2018-11-18 08:43:51,681 INFO L728 BuchiCegarLoop]: Abstraction has 16563 states and 30874 transitions. [2018-11-18 08:43:51,681 INFO L608 BuchiCegarLoop]: Abstraction has 16563 states and 30874 transitions. [2018-11-18 08:43:51,681 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 08:43:51,681 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16563 states and 30874 transitions. [2018-11-18 08:43:51,711 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9208 [2018-11-18 08:43:51,712 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:51,712 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:51,714 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:51,714 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:51,715 INFO L794 eck$LassoCheckResult]: Stem: 104090#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 104091#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 105116#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 105117#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 105344#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 105348#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 105349#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 105559#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 104922#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 104529#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 103432#L1525 assume 0 == initPersonOnFloor_~floor; 103433#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 103120#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 105071#L1317 assume !(0 == callOnFloor_~floorID); 105314#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 105127#L1329-2 assume { :end_inline_callOnFloor } true; 105924#L1669 assume { :end_inline_initPersonOnFloor } true; 104482#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 104483#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 105934#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 105939#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 105936#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 105937#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 106605#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 106603#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 106599#L2875 assume !(0 != timeShift_~tmp___9~2); 106595#L2966 assume !(1 == ~doorState~0); 106579#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 106566#L2318 assume !(1 == stopRequestedInDirection_~dir); 106532#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 106525#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 106521#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 106522#L2694 assume !(1 == ~currentHeading~0); 106702#L2704 assume !(0 == ~currentFloorID~0); 106696#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 106694#L2710-1 assume { :end_inline_continueInDirection } true; 106690#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 106689#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 106688#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 106682#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 106678#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 106668#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 106667#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 106663#L947-3 [2018-11-18 08:43:51,715 INFO L796 eck$LassoCheckResult]: Loop: 106663#L947-3 assume true; 106662#L947-1 assume !false; 106661#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 106657#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 106651#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 106650#L955 assume 1 != cleanup_~tmp___0~3; 106649#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 106647#L1254-21 assume !(0 == isFloorCalling_~floorID); 106645#L1258-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 106642#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 106463#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 106443#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 106440#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 106420#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 106419#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 106418#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 106347#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 106308#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 106303#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 106299#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 106297#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 106293#L2875-2 assume !(0 != timeShift_~tmp___9~2); 106292#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 106290#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 106288#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 106251#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 106228#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 106226#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 106227#L2694-3 assume !(1 == ~currentHeading~0); 106660#L2704-9 assume !(0 == ~currentFloorID~0); 109977#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 109974#L2710-7 assume { :end_inline_continueInDirection } true; 109970#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 109968#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 109965#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 109959#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 109950#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 109942#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 106666#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 106663#L947-3 [2018-11-18 08:43:51,715 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:51,715 INFO L82 PathProgramCache]: Analyzing trace with hash 1422855594, now seen corresponding path program 2 times [2018-11-18 08:43:51,715 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:51,715 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:51,716 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:51,716 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:51,716 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:51,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:52,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:52,401 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:52,401 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:52,402 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:52,402 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:52,402 INFO L82 PathProgramCache]: Analyzing trace with hash -1013137054, now seen corresponding path program 1 times [2018-11-18 08:43:52,402 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:52,402 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:52,403 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:52,403 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:43:52,403 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:52,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:52,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:52,422 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:52,422 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:52,423 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:52,423 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:43:52,423 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:43:52,423 INFO L87 Difference]: Start difference. First operand 16563 states and 30874 transitions. cyclomatic complexity: 14312 Second operand 3 states. [2018-11-18 08:43:52,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:52,774 INFO L93 Difference]: Finished difference Result 18214 states and 33645 transitions. [2018-11-18 08:43:52,774 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 08:43:52,774 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18214 states and 33645 transitions. [2018-11-18 08:43:52,816 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10178 [2018-11-18 08:43:52,847 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18214 states to 18214 states and 33645 transitions. [2018-11-18 08:43:52,847 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18214 [2018-11-18 08:43:52,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18214 [2018-11-18 08:43:52,857 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18214 states and 33645 transitions. [2018-11-18 08:43:52,865 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:52,865 INFO L705 BuchiCegarLoop]: Abstraction has 18214 states and 33645 transitions. [2018-11-18 08:43:52,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18214 states and 33645 transitions. [2018-11-18 08:43:53,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18214 to 16563. [2018-11-18 08:43:53,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16563 states. [2018-11-18 08:43:53,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16563 states to 16563 states and 30730 transitions. [2018-11-18 08:43:53,108 INFO L728 BuchiCegarLoop]: Abstraction has 16563 states and 30730 transitions. [2018-11-18 08:43:53,108 INFO L608 BuchiCegarLoop]: Abstraction has 16563 states and 30730 transitions. [2018-11-18 08:43:53,108 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 08:43:53,108 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16563 states and 30730 transitions. [2018-11-18 08:43:53,135 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9208 [2018-11-18 08:43:53,136 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:53,136 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:53,138 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:53,138 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:53,139 INFO L794 eck$LassoCheckResult]: Stem: 138870#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 138871#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 139895#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 139896#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 140120#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 140123#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 140124#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 140327#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 139703#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 139300#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 138213#L1525 assume 0 == initPersonOnFloor_~floor; 138214#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 137904#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 139851#L1317 assume !(0 == callOnFloor_~floorID); 140090#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 139904#L1329-2 assume { :end_inline_callOnFloor } true; 140683#L1669 assume { :end_inline_initPersonOnFloor } true; 139253#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 139254#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 140697#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 140702#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140699#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 140700#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 141192#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 141191#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 141189#L2875 assume !(0 != timeShift_~tmp___9~2); 141188#L2966 assume !(1 == ~doorState~0); 141187#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 141185#L2318 assume !(1 == stopRequestedInDirection_~dir); 141170#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 141164#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 141162#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 141163#L2694 assume !(1 == ~currentHeading~0); 140806#L2704 assume !(0 == ~currentFloorID~0); 140803#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 140800#L2710-1 assume { :end_inline_continueInDirection } true; 140773#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 140771#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 140769#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 140763#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 140752#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 140729#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 140727#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 140725#L947-3 [2018-11-18 08:43:53,139 INFO L796 eck$LassoCheckResult]: Loop: 140725#L947-3 assume true; 140724#L947-1 assume !false; 140723#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 140722#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 140721#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 140720#L955 assume 1 != cleanup_~tmp___0~3; 140718#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 140719#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 145238#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 152745#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 145232#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 152738#L1254-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 152732#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 145224#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 145219#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 145218#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 145217#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 145215#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 145214#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 145213#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145211#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145207#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 145205#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 145204#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 145203#L2875-2 assume !(0 != timeShift_~tmp___9~2); 145202#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 145201#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 145199#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 145183#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 145178#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 145174#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 141004#L2694-3 assume !(1 == ~currentHeading~0); 140796#L2704-9 assume !(0 == ~currentFloorID~0); 140786#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 140777#L2710-7 assume { :end_inline_continueInDirection } true; 140772#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 140770#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 140761#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 140756#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 140735#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 140728#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 140726#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 140725#L947-3 [2018-11-18 08:43:53,139 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:53,139 INFO L82 PathProgramCache]: Analyzing trace with hash 1422855594, now seen corresponding path program 3 times [2018-11-18 08:43:53,139 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:53,139 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:53,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:53,140 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:53,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:53,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:53,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:53,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:53,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:53,833 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:53,833 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:53,833 INFO L82 PathProgramCache]: Analyzing trace with hash -880753437, now seen corresponding path program 1 times [2018-11-18 08:43:53,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:53,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:53,834 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:53,834 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:43:53,834 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:53,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:53,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:53,843 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:53,843 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:53,843 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:53,843 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:43:53,843 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:43:53,844 INFO L87 Difference]: Start difference. First operand 16563 states and 30730 transitions. cyclomatic complexity: 14168 Second operand 3 states. [2018-11-18 08:43:54,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:54,141 INFO L93 Difference]: Finished difference Result 25037 states and 46315 transitions. [2018-11-18 08:43:54,141 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 08:43:54,141 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25037 states and 46315 transitions. [2018-11-18 08:43:54,205 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13896 [2018-11-18 08:43:54,272 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25037 states to 25037 states and 46315 transitions. [2018-11-18 08:43:54,272 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25037 [2018-11-18 08:43:54,287 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25037 [2018-11-18 08:43:54,287 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25037 states and 46315 transitions. [2018-11-18 08:43:54,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:54,303 INFO L705 BuchiCegarLoop]: Abstraction has 25037 states and 46315 transitions. [2018-11-18 08:43:54,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25037 states and 46315 transitions. [2018-11-18 08:43:54,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25037 to 16449. [2018-11-18 08:43:54,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16449 states. [2018-11-18 08:43:54,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16449 states to 16449 states and 30426 transitions. [2018-11-18 08:43:54,436 INFO L728 BuchiCegarLoop]: Abstraction has 16449 states and 30426 transitions. [2018-11-18 08:43:54,436 INFO L608 BuchiCegarLoop]: Abstraction has 16449 states and 30426 transitions. [2018-11-18 08:43:54,436 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-18 08:43:54,436 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16449 states and 30426 transitions. [2018-11-18 08:43:54,465 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9136 [2018-11-18 08:43:54,465 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:54,465 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:54,467 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:54,467 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:54,468 INFO L794 eck$LassoCheckResult]: Stem: 180460#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 180461#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 181468#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 181469#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 181693#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 181697#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 181698#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 181883#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 181279#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 180887#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 179810#L1525 assume 0 == initPersonOnFloor_~floor; 179811#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 179511#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 181424#L1317 assume !(0 == callOnFloor_~floorID); 181663#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 181476#L1329-2 assume { :end_inline_callOnFloor } true; 182228#L1669 assume { :end_inline_initPersonOnFloor } true; 180842#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 180843#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 182241#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 182246#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 182243#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 182244#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 187025#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 187024#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 187023#L2875 assume !(0 != timeShift_~tmp___9~2); 181885#L2966 assume !(1 == ~doorState~0); 181877#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 179771#L2318 assume !(1 == stopRequestedInDirection_~dir); 179772#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 181107#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 187613#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 187610#L2694 assume !(1 == ~currentHeading~0); 187605#L2704 assume !(0 == ~currentFloorID~0); 187604#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 187603#L2710-1 assume { :end_inline_continueInDirection } true; 187601#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 187600#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 187599#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 187589#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 187573#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 187563#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 187562#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 187532#L947-3 [2018-11-18 08:43:54,468 INFO L796 eck$LassoCheckResult]: Loop: 187532#L947-3 assume true; 187530#L947-1 assume !false; 187528#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 187527#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 187526#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 187525#L955 assume 1 != cleanup_~tmp___0~3; 184491#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 184487#L1254-21 assume !(0 == isFloorCalling_~floorID); 184489#L1258-21 assume !(1 == isFloorCalling_~floorID); 184493#L1262-21 assume !(2 == isFloorCalling_~floorID); 184492#L1266-21 assume !(3 == isFloorCalling_~floorID); 184490#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 184486#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 184320#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 180306#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 181824#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 182143#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 195697#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 195695#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 195691#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 195693#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 195696#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 195694#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 191361#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 191362#L2875-2 assume !(0 != timeShift_~tmp___9~2); 195866#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 195865#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 195863#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 195852#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 195848#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 195846#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 195844#L2694-3 assume !(1 == ~currentHeading~0); 195843#L2704-9 assume !(0 == ~currentFloorID~0); 195840#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 179902#L2710-7 assume { :end_inline_continueInDirection } true; 179817#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 181229#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 181754#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 180230#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 181323#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 187564#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 187561#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 187532#L947-3 [2018-11-18 08:43:54,468 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:54,468 INFO L82 PathProgramCache]: Analyzing trace with hash 1422855594, now seen corresponding path program 4 times [2018-11-18 08:43:54,468 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:54,468 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:54,469 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:54,469 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:54,469 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:54,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:55,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:55,160 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:55,161 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:55,161 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:55,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:55,161 INFO L82 PathProgramCache]: Analyzing trace with hash -664144889, now seen corresponding path program 1 times [2018-11-18 08:43:55,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:55,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:55,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:55,162 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:43:55,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:55,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:55,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:55,179 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:55,179 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:43:55,179 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:55,179 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:43:55,179 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:43:55,180 INFO L87 Difference]: Start difference. First operand 16449 states and 30426 transitions. cyclomatic complexity: 13978 Second operand 4 states. [2018-11-18 08:43:55,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:55,309 INFO L93 Difference]: Finished difference Result 25153 states and 46323 transitions. [2018-11-18 08:43:55,309 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 08:43:55,309 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25153 states and 46323 transitions. [2018-11-18 08:43:55,376 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17564 [2018-11-18 08:43:55,424 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25153 states to 25153 states and 46323 transitions. [2018-11-18 08:43:55,424 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25153 [2018-11-18 08:43:55,438 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25153 [2018-11-18 08:43:55,438 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25153 states and 46323 transitions. [2018-11-18 08:43:55,450 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:55,450 INFO L705 BuchiCegarLoop]: Abstraction has 25153 states and 46323 transitions. [2018-11-18 08:43:55,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25153 states and 46323 transitions. [2018-11-18 08:43:55,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25153 to 16467. [2018-11-18 08:43:55,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16467 states. [2018-11-18 08:43:55,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16467 states to 16467 states and 30444 transitions. [2018-11-18 08:43:55,573 INFO L728 BuchiCegarLoop]: Abstraction has 16467 states and 30444 transitions. [2018-11-18 08:43:55,573 INFO L608 BuchiCegarLoop]: Abstraction has 16467 states and 30444 transitions. [2018-11-18 08:43:55,573 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-18 08:43:55,573 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16467 states and 30444 transitions. [2018-11-18 08:43:55,602 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9148 [2018-11-18 08:43:55,602 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:55,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:55,605 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:55,605 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:55,605 INFO L794 eck$LassoCheckResult]: Stem: 222091#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 222092#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 223111#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 223112#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 223333#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 223337#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 223338#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 223544#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 222910#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 222526#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 221428#L1525 assume 0 == initPersonOnFloor_~floor; 221429#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 221124#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 223067#L1317 assume !(0 == callOnFloor_~floorID); 223306#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 223121#L1329-2 assume { :end_inline_callOnFloor } true; 223923#L1669 assume { :end_inline_initPersonOnFloor } true; 222480#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 222481#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 223938#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 223943#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 223940#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 223941#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 224093#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 224092#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 224090#L2875 assume !(0 != timeShift_~tmp___9~2); 224089#L2966 assume !(1 == ~doorState~0); 224088#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 224086#L2318 assume !(1 == stopRequestedInDirection_~dir); 224087#L2487 assume !(0 == ~currentFloorID~0); 221980#L2493 assume !(~currentFloorID~0 > 0); 224379#L2508 assume ~currentFloorID~0 > 0; 224598#L2510 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 224597#L2511 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 223725#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 223971#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 236952#L2694 assume !(1 == ~currentHeading~0); 236950#L2704 assume !(0 == ~currentFloorID~0); 236949#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 236945#L2710-1 assume { :end_inline_continueInDirection } true; 236941#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 236940#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 236939#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 236933#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 236929#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 236723#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 227643#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 224317#L947-3 [2018-11-18 08:43:55,605 INFO L796 eck$LassoCheckResult]: Loop: 224317#L947-3 assume true; 224315#L947-1 assume !false; 224313#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 224311#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 224309#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 224307#L955 assume 1 != cleanup_~tmp___0~3; 224305#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 224302#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 224303#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 237583#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 224271#L2226 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 224257#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 224255#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 224234#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 224232#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 224230#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 224227#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 224224#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 224222#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 224213#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 224210#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 224207#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 224204#L2875-2 assume !(0 != timeShift_~tmp___9~2); 224201#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 224199#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 224195#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 224196#L2487-2 assume !(0 == ~currentFloorID~0); 221475#L2493-2 assume !(~currentFloorID~0 > 0); 221418#L2508-2 assume ~currentFloorID~0 > 0; 223432#L2510-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 223433#L2511-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 227679#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 227677#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 227675#L2694-3 assume !(1 == ~currentHeading~0); 227672#L2704-9 assume !(0 == ~currentFloorID~0); 227671#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 227670#L2710-7 assume { :end_inline_continueInDirection } true; 227666#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 227665#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 227663#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 227658#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 227650#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 227644#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 227642#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 224317#L947-3 [2018-11-18 08:43:55,606 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:55,606 INFO L82 PathProgramCache]: Analyzing trace with hash -292894047, now seen corresponding path program 1 times [2018-11-18 08:43:55,606 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:55,606 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:55,606 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:55,607 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:55,607 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:55,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:56,289 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:56,289 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:56,289 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:56,289 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:56,289 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:56,289 INFO L82 PathProgramCache]: Analyzing trace with hash 1227495999, now seen corresponding path program 1 times [2018-11-18 08:43:56,289 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:56,290 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:56,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:56,290 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:56,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:56,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:56,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:56,315 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:56,315 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:43:56,315 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:56,315 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:43:56,316 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:43:56,316 INFO L87 Difference]: Start difference. First operand 16467 states and 30444 transitions. cyclomatic complexity: 13978 Second operand 5 states. [2018-11-18 08:43:58,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:58,247 INFO L93 Difference]: Finished difference Result 22645 states and 41774 transitions. [2018-11-18 08:43:58,248 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:43:58,249 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22645 states and 41774 transitions. [2018-11-18 08:43:58,317 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17631 [2018-11-18 08:43:58,354 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22645 states to 22645 states and 41774 transitions. [2018-11-18 08:43:58,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22645 [2018-11-18 08:43:58,366 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22645 [2018-11-18 08:43:58,366 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22645 states and 41774 transitions. [2018-11-18 08:43:58,376 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:58,376 INFO L705 BuchiCegarLoop]: Abstraction has 22645 states and 41774 transitions. [2018-11-18 08:43:58,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22645 states and 41774 transitions. [2018-11-18 08:43:58,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22645 to 12564. [2018-11-18 08:43:58,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12564 states. [2018-11-18 08:43:58,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12564 states to 12564 states and 23111 transitions. [2018-11-18 08:43:58,489 INFO L728 BuchiCegarLoop]: Abstraction has 12564 states and 23111 transitions. [2018-11-18 08:43:58,490 INFO L608 BuchiCegarLoop]: Abstraction has 12564 states and 23111 transitions. [2018-11-18 08:43:58,490 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-18 08:43:58,490 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12564 states and 23111 transitions. [2018-11-18 08:43:58,510 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9199 [2018-11-18 08:43:58,510 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:58,511 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:58,512 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:58,512 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:58,512 INFO L794 eck$LassoCheckResult]: Stem: 261135#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 261136#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 262056#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 262057#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 262270#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 262274#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 262275#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 262456#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 261891#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 261532#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 260529#L1525 assume 0 == initPersonOnFloor_~floor; 260530#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 260257#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 262012#L1317 assume !(0 == callOnFloor_~floorID); 262248#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 262068#L1329-2 assume { :end_inline_callOnFloor } true; 262781#L1669 assume { :end_inline_initPersonOnFloor } true; 262780#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 262779#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 262778#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 262777#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 261218#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 261219#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 261496#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 261996#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 262782#L2875 assume !(0 != timeShift_~tmp___9~2); 262458#L2966 assume !(1 == ~doorState~0); 262451#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 260498#L2318 assume !(1 == stopRequestedInDirection_~dir); 260499#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 261027#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 260630#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 260631#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 260616#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 260507#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 260508#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 260346#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 261858#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 261859#L2694-2 assume !(1 == ~currentHeading~0); 261216#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 261207#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 260606#L2710-5 assume { :end_inline_continueInDirection } true; 260603#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 265145#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 265144#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 265138#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 265134#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 265124#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 265123#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 265121#L947-3 [2018-11-18 08:43:58,512 INFO L796 eck$LassoCheckResult]: Loop: 265121#L947-3 assume true; 265120#L947-1 assume !false; 265119#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 265114#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 265112#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 265111#L955 assume 1 != cleanup_~tmp___0~3; 265110#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 265108#L1254-21 assume !(0 == isFloorCalling_~floorID); 265107#L1258-21 assume !(1 == isFloorCalling_~floorID); 265106#L1262-21 assume !(2 == isFloorCalling_~floorID); 265105#L1266-21 assume !(3 == isFloorCalling_~floorID); 265100#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 265098#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 265096#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 265084#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 265083#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 265076#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 265074#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 262798#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 262797#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 262796#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 262795#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 262793#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 262792#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 262790#L2875-2 assume !(0 != timeShift_~tmp___9~2); 262789#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 262788#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 262787#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 261030#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 261031#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 267384#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 267147#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 267383#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 267381#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 267263#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 267252#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 267248#L2983-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 267243#L2694-5 assume !(1 == ~currentHeading~0); 267238#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 265174#L2704-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 265169#L2710-11 assume { :end_inline_continueInDirection } true; 265168#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 265167#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 265165#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 265160#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 265152#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 265146#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 265122#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 265121#L947-3 [2018-11-18 08:43:58,512 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:58,513 INFO L82 PathProgramCache]: Analyzing trace with hash 1243035875, now seen corresponding path program 1 times [2018-11-18 08:43:58,513 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:58,513 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:58,513 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:58,513 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:58,513 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:58,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:59,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:59,217 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:59,217 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:59,217 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:43:59,217 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:59,217 INFO L82 PathProgramCache]: Analyzing trace with hash 1666578754, now seen corresponding path program 1 times [2018-11-18 08:43:59,217 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:59,217 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:59,218 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:59,218 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:59,218 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:59,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:43:59,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:43:59,244 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:43:59,244 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:43:59,245 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:43:59,245 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:43:59,245 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:43:59,245 INFO L87 Difference]: Start difference. First operand 12564 states and 23111 transitions. cyclomatic complexity: 10548 Second operand 3 states. [2018-11-18 08:43:59,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:43:59,336 INFO L93 Difference]: Finished difference Result 21747 states and 39923 transitions. [2018-11-18 08:43:59,337 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 08:43:59,338 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21747 states and 39923 transitions. [2018-11-18 08:43:59,387 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18354 [2018-11-18 08:43:59,425 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21747 states to 21747 states and 39923 transitions. [2018-11-18 08:43:59,425 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21747 [2018-11-18 08:43:59,437 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21747 [2018-11-18 08:43:59,437 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21747 states and 39923 transitions. [2018-11-18 08:43:59,448 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:43:59,448 INFO L705 BuchiCegarLoop]: Abstraction has 21747 states and 39923 transitions. [2018-11-18 08:43:59,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21747 states and 39923 transitions. [2018-11-18 08:43:59,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21747 to 21735. [2018-11-18 08:43:59,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21735 states. [2018-11-18 08:43:59,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21735 states to 21735 states and 39906 transitions. [2018-11-18 08:43:59,580 INFO L728 BuchiCegarLoop]: Abstraction has 21735 states and 39906 transitions. [2018-11-18 08:43:59,580 INFO L608 BuchiCegarLoop]: Abstraction has 21735 states and 39906 transitions. [2018-11-18 08:43:59,580 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-18 08:43:59,580 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21735 states and 39906 transitions. [2018-11-18 08:43:59,618 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18342 [2018-11-18 08:43:59,618 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:43:59,619 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:43:59,620 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:59,620 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:43:59,621 INFO L794 eck$LassoCheckResult]: Stem: 295458#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 295459#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 296389#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 296390#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 296602#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 296606#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 296607#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 296789#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 296212#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 295854#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 294847#L1525 assume 0 == initPersonOnFloor_~floor; 294848#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 294575#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 296340#L1317 assume !(0 == callOnFloor_~floorID); 296580#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 296398#L1329-2 assume { :end_inline_callOnFloor } true; 297160#L1669 assume { :end_inline_initPersonOnFloor } true; 297159#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 297158#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 297156#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 297155#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 295542#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 295543#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 295821#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 296323#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 297161#L2875 assume !(0 != timeShift_~tmp___9~2); 296791#L2966 assume !(1 == ~doorState~0); 296783#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 294816#L2318 assume !(1 == stopRequestedInDirection_~dir); 294817#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 295351#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 294949#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 294950#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 294936#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 294825#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 294826#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 294664#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 296176#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 296177#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 295420#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 295421#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 296960#L2704-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 294925#L2710-5 assume { :end_inline_continueInDirection } true; 294922#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 308709#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 308694#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 308688#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 308683#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 308655#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 308652#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 308648#L947-3 [2018-11-18 08:43:59,621 INFO L796 eck$LassoCheckResult]: Loop: 308648#L947-3 assume true; 308643#L947-1 assume !false; 308641#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 306562#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 305961#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 305960#L955 assume 1 != cleanup_~tmp___0~3; 305591#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 305558#L1254-21 assume !(0 == isFloorCalling_~floorID); 305559#L1258-21 assume !(1 == isFloorCalling_~floorID); 305665#L1262-21 assume !(2 == isFloorCalling_~floorID); 305400#L1266-21 assume !(3 == isFloorCalling_~floorID); 305395#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 305393#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 305380#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 305367#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 305365#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 305363#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 305362#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 305360#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 305333#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 305330#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 305329#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 305327#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 305326#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 305322#L2875-2 assume !(0 != timeShift_~tmp___9~2); 305321#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 305319#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 305318#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 305311#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 305143#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 305273#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 305272#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 305269#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 305267#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 305247#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 305236#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 305235#L2983-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 296165#L2694-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 297392#L1828-9 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 297383#L2698-15 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 297377#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 297378#L2710-11 assume { :end_inline_continueInDirection } true; 308710#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 308702#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 308700#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 308695#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 308666#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 308654#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 308651#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 308648#L947-3 [2018-11-18 08:43:59,621 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:43:59,621 INFO L82 PathProgramCache]: Analyzing trace with hash -606721328, now seen corresponding path program 1 times [2018-11-18 08:43:59,621 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:43:59,621 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:43:59,622 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:59,622 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:43:59,622 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:43:59,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:00,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:00,305 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:00,305 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:00,306 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:00,306 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:00,306 INFO L82 PathProgramCache]: Analyzing trace with hash -361787953, now seen corresponding path program 1 times [2018-11-18 08:44:00,306 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:00,306 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:00,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:00,307 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:00,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:00,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:00,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:00,352 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:00,352 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:44:00,352 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:00,352 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:44:00,353 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:44:00,353 INFO L87 Difference]: Start difference. First operand 21735 states and 39906 transitions. cyclomatic complexity: 18172 Second operand 4 states. [2018-11-18 08:44:03,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:03,026 INFO L93 Difference]: Finished difference Result 38167 states and 70124 transitions. [2018-11-18 08:44:03,027 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 08:44:03,027 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38167 states and 70124 transitions. [2018-11-18 08:44:03,123 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34682 [2018-11-18 08:44:03,212 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38167 states to 38158 states and 70114 transitions. [2018-11-18 08:44:03,212 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38158 [2018-11-18 08:44:03,231 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38158 [2018-11-18 08:44:03,231 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38158 states and 70114 transitions. [2018-11-18 08:44:03,247 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:03,247 INFO L705 BuchiCegarLoop]: Abstraction has 38158 states and 70114 transitions. [2018-11-18 08:44:03,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38158 states and 70114 transitions. [2018-11-18 08:44:03,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38158 to 22056. [2018-11-18 08:44:03,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 22056 states. [2018-11-18 08:44:03,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22056 states to 22056 states and 40422 transitions. [2018-11-18 08:44:03,417 INFO L728 BuchiCegarLoop]: Abstraction has 22056 states and 40422 transitions. [2018-11-18 08:44:03,417 INFO L608 BuchiCegarLoop]: Abstraction has 22056 states and 40422 transitions. [2018-11-18 08:44:03,417 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-18 08:44:03,417 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22056 states and 40422 transitions. [2018-11-18 08:44:03,457 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18606 [2018-11-18 08:44:03,457 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:03,457 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:03,458 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:03,458 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:03,458 INFO L794 eck$LassoCheckResult]: Stem: 355382#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 355383#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 356333#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 356334#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 356560#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 356564#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 356565#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 356757#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 356154#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 355786#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 354760#L1525 assume 0 == initPersonOnFloor_~floor; 354761#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 354488#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 356284#L1317 assume !(0 == callOnFloor_~floorID); 356537#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 356345#L1329-2 assume { :end_inline_callOnFloor } true; 357151#L1669 assume { :end_inline_initPersonOnFloor } true; 357150#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 357130#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 357126#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 357124#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 355466#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 355467#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 355749#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 356267#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 357183#L2875 assume !(0 != timeShift_~tmp___9~2); 356759#L2966 assume !(1 == ~doorState~0); 356749#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 354729#L2318 assume !(1 == stopRequestedInDirection_~dir); 354730#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 355270#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 354863#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 354864#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 354848#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 354738#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 354739#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 354580#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 356119#L2983 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 355535#L2749-1 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 354852#L2754-1 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 354853#L2694-1 assume !(1 == ~currentHeading~0); 355463#L2704-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 355464#L2704-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 357186#L2710-3 assume { :end_inline_continueInDirection } true; 357659#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 357569#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 357567#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 357560#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 357549#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 357526#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 357524#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 357522#L947-3 [2018-11-18 08:44:03,459 INFO L796 eck$LassoCheckResult]: Loop: 357522#L947-3 assume true; 357521#L947-1 assume !false; 357520#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 357519#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 357518#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 357517#L955 assume 1 != cleanup_~tmp___0~3; 357516#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 357515#L1254-21 assume !(0 == isFloorCalling_~floorID); 357514#L1258-21 assume !(1 == isFloorCalling_~floorID); 357512#L1262-21 assume !(2 == isFloorCalling_~floorID); 357509#L1266-21 assume !(3 == isFloorCalling_~floorID); 357506#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 357492#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 357486#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 357474#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 357473#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 357472#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 357469#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 357371#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 357370#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 357369#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 357368#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 357366#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 357365#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 357363#L2875-2 assume !(0 != timeShift_~tmp___9~2); 357362#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 357361#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 357360#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 355273#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 355274#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 358013#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 358011#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 358010#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 358009#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 357969#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 357957#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 357886#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 357591#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 357594#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 357587#L2694-4 assume !(1 == ~currentHeading~0); 357581#L2704-12 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 357574#L2704-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 357571#L2710-9 assume { :end_inline_continueInDirection } true; 357568#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 357561#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 357558#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 357553#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 357532#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 357525#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 357523#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 357522#L947-3 [2018-11-18 08:44:03,459 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:03,459 INFO L82 PathProgramCache]: Analyzing trace with hash 392404131, now seen corresponding path program 1 times [2018-11-18 08:44:03,459 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:03,459 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:03,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:03,459 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:03,460 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:03,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:04,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:04,177 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:04,177 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:04,177 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:04,178 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:04,178 INFO L82 PathProgramCache]: Analyzing trace with hash -17783808, now seen corresponding path program 1 times [2018-11-18 08:44:04,178 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:04,178 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:04,178 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:04,178 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:04,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:04,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:04,203 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:04,203 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:04,203 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:44:04,203 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:04,204 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:44:04,204 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:44:04,204 INFO L87 Difference]: Start difference. First operand 22056 states and 40422 transitions. cyclomatic complexity: 18367 Second operand 4 states. [2018-11-18 08:44:04,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:04,332 INFO L93 Difference]: Finished difference Result 38785 states and 71062 transitions. [2018-11-18 08:44:04,332 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 08:44:04,332 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38785 states and 71062 transitions. [2018-11-18 08:44:04,433 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35215 [2018-11-18 08:44:04,515 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38785 states to 38771 states and 71018 transitions. [2018-11-18 08:44:04,515 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38771 [2018-11-18 08:44:04,537 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38771 [2018-11-18 08:44:04,537 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38771 states and 71018 transitions. [2018-11-18 08:44:04,554 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:04,555 INFO L705 BuchiCegarLoop]: Abstraction has 38771 states and 71018 transitions. [2018-11-18 08:44:04,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38771 states and 71018 transitions. [2018-11-18 08:44:04,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38771 to 22074. [2018-11-18 08:44:04,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 22074 states. [2018-11-18 08:44:04,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22074 states to 22074 states and 40404 transitions. [2018-11-18 08:44:04,729 INFO L728 BuchiCegarLoop]: Abstraction has 22074 states and 40404 transitions. [2018-11-18 08:44:04,729 INFO L608 BuchiCegarLoop]: Abstraction has 22074 states and 40404 transitions. [2018-11-18 08:44:04,729 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-18 08:44:04,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22074 states and 40404 transitions. [2018-11-18 08:44:04,769 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18623 [2018-11-18 08:44:04,769 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:04,769 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:04,770 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:04,770 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:04,771 INFO L794 eck$LassoCheckResult]: Stem: 416245#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 416246#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 417209#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 417210#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 417431#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 417434#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 417435#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 417632#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 417031#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 416652#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 415611#L1525 assume 0 == initPersonOnFloor_~floor; 415612#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 415340#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 417161#L1317 assume !(0 == callOnFloor_~floorID); 417407#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 417221#L1329-2 assume { :end_inline_callOnFloor } true; 418015#L1669 assume { :end_inline_initPersonOnFloor } true; 418014#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 418013#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 418012#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 418010#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 416328#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 416329#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 416615#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 417144#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 418019#L2875 assume !(0 != timeShift_~tmp___9~2); 417634#L2966 assume !(1 == ~doorState~0); 417626#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 415581#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 415583#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 416185#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 416592#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 415718#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 415719#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 416395#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 418017#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 416133#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 416134#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 416992#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 416993#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 416204#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 416205#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 416318#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 415690#L2710-5 assume { :end_inline_continueInDirection } true; 415687#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 417000#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 417487#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 416084#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 417080#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 415382#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 416049#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 417314#L947-3 [2018-11-18 08:44:04,771 INFO L796 eck$LassoCheckResult]: Loop: 417314#L947-3 assume true; 436391#L947-1 assume !false; 436390#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 436385#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 436383#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 436382#L955 assume 1 != cleanup_~tmp___0~3; 436381#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 436379#L1254-21 assume !(0 == isFloorCalling_~floorID); 436378#L1258-21 assume !(1 == isFloorCalling_~floorID); 436377#L1262-21 assume !(2 == isFloorCalling_~floorID); 436376#L1266-21 assume !(3 == isFloorCalling_~floorID); 436371#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 436369#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 436367#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 436355#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 436352#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 430106#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 430107#L1254-26 assume !(0 == isFloorCalling_~floorID); 418226#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 418218#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 418219#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 418214#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 418215#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 418207#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 418208#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 418202#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 418203#L2875-2 assume !(0 != timeShift_~tmp___9~2); 418196#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 418197#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 418193#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 418162#L2487-2 assume !(0 == ~currentFloorID~0); 418163#L2493-2 assume ~currentFloorID~0 > 0; 418184#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 418185#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 418191#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 418183#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 418090#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 418091#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 436420#L2694-3 assume !(1 == ~currentHeading~0); 436419#L2704-9 assume !(0 == ~currentFloorID~0); 424372#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 436418#L2710-7 assume { :end_inline_continueInDirection } true; 436415#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 436414#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 436412#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 436407#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 436399#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 436393#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 436392#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 417314#L947-3 [2018-11-18 08:44:04,771 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:04,771 INFO L82 PathProgramCache]: Analyzing trace with hash 254516245, now seen corresponding path program 1 times [2018-11-18 08:44:04,771 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:04,771 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:04,772 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:04,772 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:04,772 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:04,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:05,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:05,440 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:05,440 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:05,440 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:05,441 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:05,441 INFO L82 PathProgramCache]: Analyzing trace with hash 823993633, now seen corresponding path program 1 times [2018-11-18 08:44:05,441 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:05,441 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:05,441 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:05,441 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:05,442 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:05,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:05,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:05,476 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:05,476 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:44:05,476 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:05,477 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:44:05,477 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:44:05,477 INFO L87 Difference]: Start difference. First operand 22074 states and 40404 transitions. cyclomatic complexity: 18331 Second operand 4 states. [2018-11-18 08:44:05,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:05,805 INFO L93 Difference]: Finished difference Result 74712 states and 137120 transitions. [2018-11-18 08:44:05,806 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 08:44:05,806 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 74712 states and 137120 transitions. [2018-11-18 08:44:06,143 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 68229 [2018-11-18 08:44:06,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 74712 states to 74712 states and 137120 transitions. [2018-11-18 08:44:06,256 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 74712 [2018-11-18 08:44:06,290 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 74712 [2018-11-18 08:44:06,290 INFO L73 IsDeterministic]: Start isDeterministic. Operand 74712 states and 137120 transitions. [2018-11-18 08:44:06,320 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:06,320 INFO L705 BuchiCegarLoop]: Abstraction has 74712 states and 137120 transitions. [2018-11-18 08:44:06,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74712 states and 137120 transitions. [2018-11-18 08:44:06,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74712 to 22134. [2018-11-18 08:44:06,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 22134 states. [2018-11-18 08:44:06,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22134 states to 22134 states and 40464 transitions. [2018-11-18 08:44:06,572 INFO L728 BuchiCegarLoop]: Abstraction has 22134 states and 40464 transitions. [2018-11-18 08:44:06,572 INFO L608 BuchiCegarLoop]: Abstraction has 22134 states and 40464 transitions. [2018-11-18 08:44:06,572 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-18 08:44:06,572 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22134 states and 40464 transitions. [2018-11-18 08:44:06,610 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18671 [2018-11-18 08:44:06,610 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:06,610 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:06,612 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:06,612 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:06,612 INFO L794 eck$LassoCheckResult]: Stem: 513034#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 513035#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 513963#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 513964#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 514181#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 514186#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 514187#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 514383#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 513791#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 513428#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 512407#L1525 assume 0 == initPersonOnFloor_~floor; 512408#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 512137#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 513918#L1317 assume !(0 == callOnFloor_~floorID); 514161#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 513972#L1329-2 assume { :end_inline_callOnFloor } true; 514778#L1669 assume { :end_inline_initPersonOnFloor } true; 514777#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 514776#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 514773#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 514772#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 513112#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 513113#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 513394#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 513901#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 514833#L2875 assume !(0 != timeShift_~tmp___9~2); 514385#L2966 assume !(1 == ~doorState~0); 514376#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 512378#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 512380#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 512974#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 513371#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 514832#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 514775#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 514831#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 514830#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 512921#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 512922#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 514360#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 514760#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 512993#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 512994#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 513103#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 512485#L2710-5 assume { :end_inline_continueInDirection } true; 512482#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 524661#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 524660#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 524655#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 524662#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 524650#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 524640#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 524615#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 524613#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 524611#L947-3 [2018-11-18 08:44:06,613 INFO L796 eck$LassoCheckResult]: Loop: 524611#L947-3 assume true; 524610#L947-1 assume !false; 524609#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 524608#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 524607#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 524606#L955 assume 1 != cleanup_~tmp___0~3; 524605#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 524603#L1254-21 assume !(0 == isFloorCalling_~floorID); 524602#L1258-21 assume !(1 == isFloorCalling_~floorID); 524601#L1262-21 assume !(2 == isFloorCalling_~floorID); 524600#L1266-21 assume !(3 == isFloorCalling_~floorID); 524599#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 524598#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 524595#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 524597#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 524864#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 524863#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 524862#L1254-26 assume !(0 == isFloorCalling_~floorID); 524860#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 524856#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 524855#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 524854#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 524851#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 524846#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 524842#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 524841#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 524839#L2875-2 assume !(0 != timeShift_~tmp___9~2); 524837#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 524836#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 524835#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 524834#L2487-2 assume !(0 == ~currentFloorID~0); 524832#L2493-2 assume ~currentFloorID~0 > 0; 524830#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 524828#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 524818#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 524720#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 524674#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 524671#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 524669#L2694-3 assume !(1 == ~currentHeading~0); 524667#L2704-9 assume !(0 == ~currentFloorID~0); 514957#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 524665#L2710-7 assume { :end_inline_continueInDirection } true; 524638#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 524637#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 524636#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 524631#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 524639#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 524622#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 524625#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 524614#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 524612#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 524611#L947-3 [2018-11-18 08:44:06,613 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:06,613 INFO L82 PathProgramCache]: Analyzing trace with hash -223014312, now seen corresponding path program 1 times [2018-11-18 08:44:06,613 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:06,613 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:06,614 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:06,614 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:06,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:06,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:07,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:07,297 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:07,298 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:07,298 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:07,298 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:07,298 INFO L82 PathProgramCache]: Analyzing trace with hash 1584101412, now seen corresponding path program 1 times [2018-11-18 08:44:07,298 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:07,298 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:07,299 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:07,299 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:07,299 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:07,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:07,388 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:07,389 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:07,389 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:07,389 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:07,389 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:44:07,389 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:44:07,389 INFO L87 Difference]: Start difference. First operand 22134 states and 40464 transitions. cyclomatic complexity: 18331 Second operand 3 states. [2018-11-18 08:44:07,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:07,666 INFO L93 Difference]: Finished difference Result 23754 states and 43260 transitions. [2018-11-18 08:44:07,666 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 08:44:07,666 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23754 states and 43260 transitions. [2018-11-18 08:44:07,722 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20123 [2018-11-18 08:44:07,763 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23754 states to 23754 states and 43260 transitions. [2018-11-18 08:44:07,763 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23754 [2018-11-18 08:44:07,775 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23754 [2018-11-18 08:44:07,775 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23754 states and 43260 transitions. [2018-11-18 08:44:07,786 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:07,786 INFO L705 BuchiCegarLoop]: Abstraction has 23754 states and 43260 transitions. [2018-11-18 08:44:07,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23754 states and 43260 transitions. [2018-11-18 08:44:07,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23754 to 21770. [2018-11-18 08:44:07,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21770 states. [2018-11-18 08:44:07,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21770 states to 21770 states and 39936 transitions. [2018-11-18 08:44:07,921 INFO L728 BuchiCegarLoop]: Abstraction has 21770 states and 39936 transitions. [2018-11-18 08:44:07,921 INFO L608 BuchiCegarLoop]: Abstraction has 21770 states and 39936 transitions. [2018-11-18 08:44:07,921 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-18 08:44:07,921 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21770 states and 39936 transitions. [2018-11-18 08:44:07,960 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18307 [2018-11-18 08:44:07,960 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:07,960 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:07,961 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:07,961 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:07,962 INFO L794 eck$LassoCheckResult]: Stem: 558907#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 558908#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 559841#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 559842#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 560062#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 560067#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 560068#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 560251#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 559670#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 559306#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 558293#L1525 assume 0 == initPersonOnFloor_~floor; 558294#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 558032#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 559792#L1317 assume !(0 == callOnFloor_~floorID); 560038#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 559854#L1329-2 assume { :end_inline_callOnFloor } true; 560618#L1669 assume { :end_inline_initPersonOnFloor } true; 560617#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 560616#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 560615#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 560614#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 558988#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 558989#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 559268#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 559776#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 560619#L2875 assume !(0 != timeShift_~tmp___9~2); 560253#L2966 assume !(1 == ~doorState~0); 560246#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 558263#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 558265#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 558847#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 559245#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 558399#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 558400#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 558384#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 558272#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 558273#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 558800#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 560231#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 560609#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 558866#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 558867#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 558979#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 558373#L2710-5 assume { :end_inline_continueInDirection } true; 558370#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 559644#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 560119#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 558757#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 559709#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 560446#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 558733#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 558074#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 558724#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 559946#L947-3 [2018-11-18 08:44:07,962 INFO L796 eck$LassoCheckResult]: Loop: 559946#L947-3 assume true; 571965#L947-1 assume !false; 571959#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 571950#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 571942#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 571837#L955 assume 1 != cleanup_~tmp___0~3; 571829#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 571713#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 571709#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 571703#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 571695#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 558936#L1254-22 assume !(0 == isFloorCalling_~floorID); 558169#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 558170#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 559554#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 558761#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 560190#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 560520#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 570848#L1254-26 assume !(0 == isFloorCalling_~floorID); 572269#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 572265#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 572264#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 572263#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 572262#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 572258#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 572256#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 572255#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 572253#L2875-2 assume !(0 != timeShift_~tmp___9~2); 572252#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 572251#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 572250#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 572249#L2487-2 assume !(0 == ~currentFloorID~0); 572248#L2493-2 assume ~currentFloorID~0 > 0; 572246#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 572244#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 572242#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 572231#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 572215#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 572204#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 572198#L2694-3 assume !(1 == ~currentHeading~0); 572191#L2704-9 assume !(0 == ~currentFloorID~0); 560805#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 572181#L2710-7 assume { :end_inline_continueInDirection } true; 572169#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 572166#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 572159#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 572149#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 572147#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 572133#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 572136#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 572120#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 571974#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 559946#L947-3 [2018-11-18 08:44:07,962 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:07,962 INFO L82 PathProgramCache]: Analyzing trace with hash -223014312, now seen corresponding path program 2 times [2018-11-18 08:44:07,962 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:07,962 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:07,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:07,963 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:07,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:07,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:08,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:08,644 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:08,644 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:08,645 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:08,645 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:08,645 INFO L82 PathProgramCache]: Analyzing trace with hash -340636724, now seen corresponding path program 1 times [2018-11-18 08:44:08,645 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:08,645 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:08,645 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:08,645 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:08,645 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:08,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:08,702 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:08,702 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:08,702 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 08:44:08,702 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:08,703 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 08:44:08,703 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 08:44:08,703 INFO L87 Difference]: Start difference. First operand 21770 states and 39936 transitions. cyclomatic complexity: 18167 Second operand 7 states. [2018-11-18 08:44:15,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:15,239 INFO L93 Difference]: Finished difference Result 135481 states and 250136 transitions. [2018-11-18 08:44:15,239 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-18 08:44:15,239 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135481 states and 250136 transitions. [2018-11-18 08:44:15,654 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 126653 [2018-11-18 08:44:15,964 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135481 states to 135481 states and 250136 transitions. [2018-11-18 08:44:15,964 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135481 [2018-11-18 08:44:16,052 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135481 [2018-11-18 08:44:16,052 INFO L73 IsDeterministic]: Start isDeterministic. Operand 135481 states and 250136 transitions. [2018-11-18 08:44:16,114 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:16,114 INFO L705 BuchiCegarLoop]: Abstraction has 135481 states and 250136 transitions. [2018-11-18 08:44:16,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135481 states and 250136 transitions. [2018-11-18 08:44:16,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135481 to 41772. [2018-11-18 08:44:16,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41772 states. [2018-11-18 08:44:16,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41772 states to 41772 states and 76546 transitions. [2018-11-18 08:44:16,648 INFO L728 BuchiCegarLoop]: Abstraction has 41772 states and 76546 transitions. [2018-11-18 08:44:16,648 INFO L608 BuchiCegarLoop]: Abstraction has 41772 states and 76546 transitions. [2018-11-18 08:44:16,648 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-18 08:44:16,648 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41772 states and 76546 transitions. [2018-11-18 08:44:16,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36480 [2018-11-18 08:44:16,725 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:16,725 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:16,726 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:16,727 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:16,727 INFO L794 eck$LassoCheckResult]: Stem: 716211#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 716212#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 717145#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 717146#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 717357#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 717362#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 717363#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 717546#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 716968#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 716609#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 715590#L1525 assume 0 == initPersonOnFloor_~floor; 715591#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 715330#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 717101#L1317 assume !(0 == callOnFloor_~floorID); 717334#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 717335#L1329-2 assume { :end_inline_callOnFloor } true; 717516#L1669 assume { :end_inline_initPersonOnFloor } true; 717517#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 717901#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 717902#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 717896#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 717898#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 716573#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 716574#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 717908#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 717909#L2875 assume !(0 != timeShift_~tmp___9~2); 717548#L2966 assume !(1 == ~doorState~0); 717549#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 715561#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 715563#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 716822#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 716551#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 717983#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 717912#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 717982#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 717979#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 717980#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 718174#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 717910#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 717889#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 716172#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 716173#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 716283#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 715667#L2710-5 assume { :end_inline_continueInDirection } true; 715664#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 716943#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 717415#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 716055#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 717719#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 717720#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 716034#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 715372#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 735151#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 735148#L947-3 [2018-11-18 08:44:16,727 INFO L796 eck$LassoCheckResult]: Loop: 735148#L947-3 assume true; 735146#L947-1 assume !false; 735144#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 735142#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 735140#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 735138#L955 assume 1 != cleanup_~tmp___0~3; 735131#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 735130#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 735129#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 735125#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 735126#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 735253#L1254-22 assume !(0 == isFloorCalling_~floorID); 735251#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 735249#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 735246#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 735245#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 735244#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 719930#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 719931#L1254-26 assume !(0 == isFloorCalling_~floorID); 735240#L1258-26 assume !(1 == isFloorCalling_~floorID); 735237#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 735236#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 735235#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 735234#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 735233#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 735229#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 735228#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 735227#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 735225#L2875-2 assume !(0 != timeShift_~tmp___9~2); 735224#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 735223#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 735222#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 735218#L2487-2 assume !(0 == ~currentFloorID~0); 735216#L2493-2 assume ~currentFloorID~0 > 0; 735214#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 735212#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 735210#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 735199#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 735190#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 735189#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 735188#L2694-3 assume !(1 == ~currentHeading~0); 735187#L2704-9 assume !(0 == ~currentFloorID~0); 719830#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 735186#L2710-7 assume { :end_inline_continueInDirection } true; 735183#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 735182#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 735181#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 735176#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 735283#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 735159#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 735162#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 735152#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 735150#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 735148#L947-3 [2018-11-18 08:44:16,727 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:16,728 INFO L82 PathProgramCache]: Analyzing trace with hash -223014312, now seen corresponding path program 3 times [2018-11-18 08:44:16,728 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:16,728 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:16,728 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:16,728 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:16,729 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:16,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:17,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:17,409 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:17,409 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:17,409 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:17,409 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:17,410 INFO L82 PathProgramCache]: Analyzing trace with hash 523983456, now seen corresponding path program 1 times [2018-11-18 08:44:17,410 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:17,410 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:17,410 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:17,410 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:17,410 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:17,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:17,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:17,439 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:17,439 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:44:17,439 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:17,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:44:17,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:44:17,440 INFO L87 Difference]: Start difference. First operand 41772 states and 76546 transitions. cyclomatic complexity: 34775 Second operand 5 states. [2018-11-18 08:44:20,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:20,122 INFO L93 Difference]: Finished difference Result 116542 states and 214228 transitions. [2018-11-18 08:44:20,122 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:44:20,122 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 116542 states and 214228 transitions. [2018-11-18 08:44:20,457 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 107922 [2018-11-18 08:44:20,694 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 116542 states to 116542 states and 214228 transitions. [2018-11-18 08:44:20,694 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 116542 [2018-11-18 08:44:20,761 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 116542 [2018-11-18 08:44:20,761 INFO L73 IsDeterministic]: Start isDeterministic. Operand 116542 states and 214228 transitions. [2018-11-18 08:44:20,812 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:20,812 INFO L705 BuchiCegarLoop]: Abstraction has 116542 states and 214228 transitions. [2018-11-18 08:44:20,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116542 states and 214228 transitions. [2018-11-18 08:44:21,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116542 to 57150. [2018-11-18 08:44:21,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 57150 states. [2018-11-18 08:44:21,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57150 states to 57150 states and 105046 transitions. [2018-11-18 08:44:21,356 INFO L728 BuchiCegarLoop]: Abstraction has 57150 states and 105046 transitions. [2018-11-18 08:44:21,356 INFO L608 BuchiCegarLoop]: Abstraction has 57150 states and 105046 transitions. [2018-11-18 08:44:21,356 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-18 08:44:21,356 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57150 states and 105046 transitions. [2018-11-18 08:44:21,469 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51858 [2018-11-18 08:44:21,470 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:21,470 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:21,471 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:21,471 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:21,471 INFO L794 eck$LassoCheckResult]: Stem: 874552#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 874553#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 875517#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 875518#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 875740#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 875744#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 875745#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 875957#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 875330#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 874964#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 873925#L1525 assume 0 == initPersonOnFloor_~floor; 873926#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 873665#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 875469#L1317 assume !(0 == callOnFloor_~floorID); 875717#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 875718#L1329-2 assume { :end_inline_callOnFloor } true; 876351#L1669 assume { :end_inline_initPersonOnFloor } true; 876352#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 876347#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 876348#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 876343#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 876344#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 874921#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 874922#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 876357#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 876358#L2875 assume !(0 != timeShift_~tmp___9~2); 875959#L2966 assume !(1 == ~doorState~0); 875960#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 873895#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 873897#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 875181#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 875182#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 876446#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 876364#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 876441#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 876442#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 874441#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 874442#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 876361#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 876362#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 874515#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 874516#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 874625#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 874626#L2710-5 assume { :end_inline_continueInDirection } true; 888373#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 888374#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 888367#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 888361#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 876161#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 876162#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 876236#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 874364#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 874365#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 890282#L947-3 [2018-11-18 08:44:21,472 INFO L796 eck$LassoCheckResult]: Loop: 890282#L947-3 assume true; 894216#L947-1 assume !false; 894215#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 894214#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 894213#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 894212#L955 assume 1 != cleanup_~tmp___0~3; 894211#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 894210#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 894209#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 894207#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 894205#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 894204#L1254-22 assume !(0 == isFloorCalling_~floorID); 894203#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 894202#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 894199#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 890257#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 890258#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 890248#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 890249#L1254-26 assume !(0 == isFloorCalling_~floorID); 894197#L1258-26 assume !(1 == isFloorCalling_~floorID); 890551#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 890550#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 890548#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 890547#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 890546#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 890543#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 890542#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 890540#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 890539#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 890537#L2875-2 assume !(0 != timeShift_~tmp___9~2); 890536#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 890535#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 890534#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 890530#L2487-2 assume !(0 == ~currentFloorID~0); 890529#L2493-2 assume ~currentFloorID~0 > 0; 890528#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 890516#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 890512#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 890502#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 890346#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 890341#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 890336#L2694-3 assume !(1 == ~currentHeading~0); 890333#L2704-9 assume !(0 == ~currentFloorID~0); 888496#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 890325#L2710-7 assume { :end_inline_continueInDirection } true; 890323#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 894241#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 894239#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 894234#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 894235#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 894225#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 894228#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 894218#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 894217#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 890282#L947-3 [2018-11-18 08:44:21,472 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:21,472 INFO L82 PathProgramCache]: Analyzing trace with hash -223014312, now seen corresponding path program 4 times [2018-11-18 08:44:21,472 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:21,472 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:21,473 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:21,473 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:21,473 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:21,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:22,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:22,158 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:22,158 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:44:22,158 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:22,158 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:22,158 INFO L82 PathProgramCache]: Analyzing trace with hash -1479747748, now seen corresponding path program 1 times [2018-11-18 08:44:22,158 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:22,158 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:22,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:22,159 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:22,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:22,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:22,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:22,184 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:22,184 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 08:44:22,184 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:22,184 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:44:22,184 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:44:22,184 INFO L87 Difference]: Start difference. First operand 57150 states and 105046 transitions. cyclomatic complexity: 47897 Second operand 3 states. [2018-11-18 08:44:22,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:22,469 INFO L93 Difference]: Finished difference Result 57150 states and 105040 transitions. [2018-11-18 08:44:22,469 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 08:44:22,470 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57150 states and 105040 transitions. [2018-11-18 08:44:22,627 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51858 [2018-11-18 08:44:22,742 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57150 states to 57150 states and 105040 transitions. [2018-11-18 08:44:22,742 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57150 [2018-11-18 08:44:22,775 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57150 [2018-11-18 08:44:22,775 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57150 states and 105040 transitions. [2018-11-18 08:44:22,801 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:22,801 INFO L705 BuchiCegarLoop]: Abstraction has 57150 states and 105040 transitions. [2018-11-18 08:44:22,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57150 states and 105040 transitions. [2018-11-18 08:44:23,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57150 to 57150. [2018-11-18 08:44:23,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 57150 states. [2018-11-18 08:44:23,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57150 states to 57150 states and 105040 transitions. [2018-11-18 08:44:23,166 INFO L728 BuchiCegarLoop]: Abstraction has 57150 states and 105040 transitions. [2018-11-18 08:44:23,166 INFO L608 BuchiCegarLoop]: Abstraction has 57150 states and 105040 transitions. [2018-11-18 08:44:23,166 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-18 08:44:23,166 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57150 states and 105040 transitions. [2018-11-18 08:44:23,281 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51858 [2018-11-18 08:44:23,281 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:23,281 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:23,283 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:23,283 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:23,283 INFO L794 eck$LassoCheckResult]: Stem: 988857#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 988858#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 989787#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 989788#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 990002#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 990007#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 990008#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 990207#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 989610#L250 assume !(0 == getOrigin_~person); 989309#L254 assume !(1 == getOrigin_~person); 989249#L258 assume !(2 == getOrigin_~person); 989250#L262 assume !(3 == getOrigin_~person); 989822#L266 assume !(4 == getOrigin_~person); 989770#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 989771#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 988235#L1525 assume 0 == initPersonOnFloor_~floor; 988236#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 987976#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 989742#L1317 assume !(0 == callOnFloor_~floorID); 989979#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 989980#L1329-2 assume { :end_inline_callOnFloor } true; 991477#L1669 assume { :end_inline_initPersonOnFloor } true; 991476#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 991475#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 991474#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 991473#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 991472#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 991471#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 991470#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 991469#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 991468#L2875 assume !(0 != timeShift_~tmp___9~2); 991467#L2966 assume !(1 == ~doorState~0); 991466#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 991465#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 988799#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 988800#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 989463#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 991357#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 990575#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 990640#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 990641#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 988748#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 988749#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 990571#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 990566#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 988819#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 988820#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 988928#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 988314#L2710-5 assume { :end_inline_continueInDirection } true; 988311#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1019122#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1019112#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1019105#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1019104#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1019095#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1019085#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1019082#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1018741#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1018740#L947-3 [2018-11-18 08:44:23,284 INFO L796 eck$LassoCheckResult]: Loop: 1018740#L947-3 assume true; 1018731#L947-1 assume !false; 1018732#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1018723#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1018724#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1018715#L955 assume 1 != cleanup_~tmp___0~3; 1018716#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1018707#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1018708#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1018698#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1018699#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1018689#L1254-22 assume !(0 == isFloorCalling_~floorID); 1018690#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1018680#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1018681#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1018484#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1018485#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1018317#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1018318#L1254-26 assume !(0 == isFloorCalling_~floorID); 1022563#L1258-26 assume !(1 == isFloorCalling_~floorID); 1018912#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1018911#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1018910#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1018909#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1018908#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1018901#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1018900#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1018898#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1018897#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1018895#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1018894#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1018893#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1018892#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1018891#L2487-2 assume !(0 == ~currentFloorID~0); 1018890#L2493-2 assume ~currentFloorID~0 > 0; 1018888#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1018889#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1019137#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 1018817#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1018807#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1018805#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1018804#L2694-3 assume !(1 == ~currentHeading~0); 1018803#L2704-9 assume !(0 == ~currentFloorID~0); 1002733#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1018802#L2710-7 assume { :end_inline_continueInDirection } true; 1018800#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1022633#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1022632#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1018786#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1018782#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1018758#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1018761#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1018752#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1018739#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1018740#L947-3 [2018-11-18 08:44:23,284 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:23,284 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 1 times [2018-11-18 08:44:23,284 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:23,284 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:23,285 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:23,285 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:23,285 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:23,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:23,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:23,972 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:23,972 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:44:23,973 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:23,973 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:23,973 INFO L82 PathProgramCache]: Analyzing trace with hash -1479747748, now seen corresponding path program 2 times [2018-11-18 08:44:23,973 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:23,973 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:23,973 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:23,973 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:23,973 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:23,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:23,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:23,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:23,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 08:44:23,995 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:23,995 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 08:44:23,995 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 08:44:23,995 INFO L87 Difference]: Start difference. First operand 57150 states and 105040 transitions. cyclomatic complexity: 47891 Second operand 7 states. [2018-11-18 08:44:30,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:30,204 INFO L93 Difference]: Finished difference Result 79698 states and 146178 transitions. [2018-11-18 08:44:30,205 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-18 08:44:30,205 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79698 states and 146178 transitions. [2018-11-18 08:44:30,417 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 71354 [2018-11-18 08:44:30,569 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79698 states to 79698 states and 146178 transitions. [2018-11-18 08:44:30,570 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 79698 [2018-11-18 08:44:30,615 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 79698 [2018-11-18 08:44:30,615 INFO L73 IsDeterministic]: Start isDeterministic. Operand 79698 states and 146178 transitions. [2018-11-18 08:44:30,651 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:30,651 INFO L705 BuchiCegarLoop]: Abstraction has 79698 states and 146178 transitions. [2018-11-18 08:44:30,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79698 states and 146178 transitions. [2018-11-18 08:44:30,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79698 to 33526. [2018-11-18 08:44:30,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 33526 states. [2018-11-18 08:44:30,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33526 states to 33526 states and 61534 transitions. [2018-11-18 08:44:30,994 INFO L728 BuchiCegarLoop]: Abstraction has 33526 states and 61534 transitions. [2018-11-18 08:44:30,994 INFO L608 BuchiCegarLoop]: Abstraction has 33526 states and 61534 transitions. [2018-11-18 08:44:30,994 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-18 08:44:30,994 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33526 states and 61534 transitions. [2018-11-18 08:44:31,070 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28234 [2018-11-18 08:44:31,070 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:31,070 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:31,072 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:31,072 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:31,072 INFO L794 eck$LassoCheckResult]: Stem: 1125751#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1125752#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1126720#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1126721#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1126952#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1126958#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1126959#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1127163#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1126528#L250 assume !(0 == getOrigin_~person); 1126212#L254 assume !(1 == getOrigin_~person); 1126157#L258 assume !(2 == getOrigin_~person); 1126158#L262 assume !(3 == getOrigin_~person); 1126760#L266 assume !(4 == getOrigin_~person); 1126696#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1126697#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1125120#L1525 assume 0 == initPersonOnFloor_~floor; 1125121#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1124860#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1126664#L1317 assume !(0 == callOnFloor_~floorID); 1126928#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1126929#L1329-2 assume { :end_inline_callOnFloor } true; 1127553#L1669 assume { :end_inline_initPersonOnFloor } true; 1127549#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1127550#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1127545#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1127546#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1129359#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1126118#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1126119#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1127555#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1127556#L2875 assume !(0 != timeShift_~tmp___9~2); 1129355#L2966 assume !(1 == ~doorState~0); 1127154#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1127155#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1125684#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1125685#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1145420#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1145419#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1145404#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1145418#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1145416#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1145417#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1127618#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1127634#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1127534#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1127535#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1127332#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1125823#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1125197#L2710-5 assume { :end_inline_continueInDirection } true; 1125194#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1126498#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1127014#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1125589#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1126575#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1127357#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1127432#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1125559#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1125560#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1146634#L947-3 [2018-11-18 08:44:31,072 INFO L796 eck$LassoCheckResult]: Loop: 1146634#L947-3 assume true; 1146633#L947-1 assume !false; 1146631#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1146629#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1146627#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1146625#L955 assume 1 != cleanup_~tmp___0~3; 1146626#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1146621#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1146622#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1146617#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1146618#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1146612#L1254-22 assume !(0 == isFloorCalling_~floorID); 1146613#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1146608#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1146609#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1145884#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1145885#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1145869#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1145870#L1254-26 assume !(0 == isFloorCalling_~floorID); 1148824#L1258-26 assume !(1 == isFloorCalling_~floorID); 1148763#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1148761#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1148759#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1148757#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1148756#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1148750#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1148749#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1148746#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1148744#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1148742#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1148740#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1148739#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1148738#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1148737#L2487-2 assume !(0 == ~currentFloorID~0); 1148735#L2493-2 assume !(~currentFloorID~0 > 0); 1148731#L2508-2 assume !(~currentFloorID~0 > 0); 1148727#L2521-2 assume !(~currentFloorID~0 > 1); 1148708#L2537-2 assume ~currentFloorID~0 > 1; 1148755#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1148709#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1148526#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1148520#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1148516#L2694-3 assume !(1 == ~currentHeading~0); 1148514#L2704-9 assume !(0 == ~currentFloorID~0); 1145613#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1146679#L2710-7 assume { :end_inline_continueInDirection } true; 1146674#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1146673#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1146671#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1146666#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1146667#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1146657#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1146660#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1146650#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1146635#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1146634#L947-3 [2018-11-18 08:44:31,073 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:31,073 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 2 times [2018-11-18 08:44:31,073 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:31,073 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:31,074 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:31,074 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:31,074 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:31,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:31,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:31,762 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:31,762 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:44:31,762 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:31,762 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:31,762 INFO L82 PathProgramCache]: Analyzing trace with hash -215934709, now seen corresponding path program 1 times [2018-11-18 08:44:31,763 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:31,763 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:31,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:31,763 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:31,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:31,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:31,808 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:31,808 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:31,808 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:44:31,809 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:31,809 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:44:31,809 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:44:31,809 INFO L87 Difference]: Start difference. First operand 33526 states and 61534 transitions. cyclomatic complexity: 28010 Second operand 4 states. [2018-11-18 08:44:37,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:37,306 INFO L93 Difference]: Finished difference Result 44040 states and 80260 transitions. [2018-11-18 08:44:37,307 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:44:37,307 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44040 states and 80260 transitions. [2018-11-18 08:44:37,428 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 38540 [2018-11-18 08:44:37,509 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44040 states to 44016 states and 80232 transitions. [2018-11-18 08:44:37,509 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44016 [2018-11-18 08:44:37,533 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44016 [2018-11-18 08:44:37,533 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44016 states and 80232 transitions. [2018-11-18 08:44:37,553 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:37,553 INFO L705 BuchiCegarLoop]: Abstraction has 44016 states and 80232 transitions. [2018-11-18 08:44:37,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44016 states and 80232 transitions. [2018-11-18 08:44:37,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44016 to 42322. [2018-11-18 08:44:37,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 42322 states. [2018-11-18 08:44:37,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42322 states to 42322 states and 77378 transitions. [2018-11-18 08:44:37,828 INFO L728 BuchiCegarLoop]: Abstraction has 42322 states and 77378 transitions. [2018-11-18 08:44:37,828 INFO L608 BuchiCegarLoop]: Abstraction has 42322 states and 77378 transitions. [2018-11-18 08:44:37,828 INFO L442 BuchiCegarLoop]: ======== Iteration 19============ [2018-11-18 08:44:37,828 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42322 states and 77378 transitions. [2018-11-18 08:44:37,908 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37030 [2018-11-18 08:44:37,909 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:37,909 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:37,910 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:37,911 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:37,911 INFO L794 eck$LassoCheckResult]: Stem: 1203318#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1203319#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1204268#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1204269#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1204482#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1204485#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1204486#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1204681#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1204080#L250 assume !(0 == getOrigin_~person); 1203776#L254 assume !(1 == getOrigin_~person); 1203722#L258 assume !(2 == getOrigin_~person); 1203723#L262 assume !(3 == getOrigin_~person); 1204300#L266 assume !(4 == getOrigin_~person); 1204249#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1204250#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1202697#L1525 assume 0 == initPersonOnFloor_~floor; 1202698#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1202437#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1204219#L1317 assume !(0 == callOnFloor_~floorID); 1204459#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1204460#L1329-2 assume { :end_inline_callOnFloor } true; 1205058#L1669 assume { :end_inline_initPersonOnFloor } true; 1205054#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1205055#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1205050#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1205051#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1208721#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1203683#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1203684#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1205062#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1205063#L2875 assume !(0 != timeShift_~tmp___9~2); 1204683#L2966 assume !(1 == ~doorState~0); 1204671#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1202666#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1202668#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1203256#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1205154#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1205155#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1205089#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1205090#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1205077#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1205078#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1205166#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1205067#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1205068#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1203276#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1203277#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1207331#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1202775#L2710-5 assume { :end_inline_continueInDirection } true; 1202772#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1227626#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1227625#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1227618#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1227617#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1215007#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1203141#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1202479#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1204372#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1204373#L947-3 [2018-11-18 08:44:37,911 INFO L796 eck$LassoCheckResult]: Loop: 1204373#L947-3 assume true; 1227699#L947-1 assume !false; 1227682#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1227677#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1227672#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1227666#L955 assume 1 != cleanup_~tmp___0~3; 1227663#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1227656#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1227648#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1227633#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1227628#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1227630#L1254-22 assume !(0 == isFloorCalling_~floorID); 1232310#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1232309#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1232308#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1232305#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1232304#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1232303#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1232301#L1254-26 assume !(0 == isFloorCalling_~floorID); 1232302#L1258-26 assume !(1 == isFloorCalling_~floorID); 1232127#L1262-26 assume !(2 == isFloorCalling_~floorID); 1232128#L1266-26 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1243453#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1243449#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1243451#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1243459#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1243456#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1243454#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1243452#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1243447#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1243448#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1244417#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1204673#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1204674#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1244416#L2487-2 assume !(0 == ~currentFloorID~0); 1244414#L2493-2 assume !(~currentFloorID~0 > 0); 1244400#L2508-2 assume !(~currentFloorID~0 > 0); 1244203#L2521-2 assume !(~currentFloorID~0 > 1); 1244171#L2537-2 assume ~currentFloorID~0 > 1; 1244205#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1244172#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1244169#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1244168#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1205043#L2694-3 assume !(1 == ~currentHeading~0); 1203386#L2704-9 assume !(0 == ~currentFloorID~0); 1203387#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1231422#L2710-7 assume { :end_inline_continueInDirection } true; 1231419#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1232183#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1232182#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1232177#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1232220#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1231337#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1231340#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1231328#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1231319#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1204373#L947-3 [2018-11-18 08:44:37,911 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:37,912 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 3 times [2018-11-18 08:44:37,912 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:37,912 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:37,912 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:37,913 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:37,913 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:37,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:38,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:38,625 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:38,625 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:44:38,625 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:38,625 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:38,625 INFO L82 PathProgramCache]: Analyzing trace with hash 802443452, now seen corresponding path program 1 times [2018-11-18 08:44:38,625 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:38,625 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:38,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:38,626 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:38,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:38,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:38,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:38,649 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:38,649 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:44:38,649 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:38,650 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:44:38,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:44:38,650 INFO L87 Difference]: Start difference. First operand 42322 states and 77378 transitions. cyclomatic complexity: 35058 Second operand 5 states. [2018-11-18 08:44:40,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:40,803 INFO L93 Difference]: Finished difference Result 98222 states and 178502 transitions. [2018-11-18 08:44:40,804 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:44:40,804 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 98222 states and 178502 transitions. [2018-11-18 08:44:41,073 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 89602 [2018-11-18 08:44:41,264 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 98222 states to 98222 states and 178502 transitions. [2018-11-18 08:44:41,264 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 98222 [2018-11-18 08:44:41,321 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 98222 [2018-11-18 08:44:41,321 INFO L73 IsDeterministic]: Start isDeterministic. Operand 98222 states and 178502 transitions. [2018-11-18 08:44:41,366 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:41,366 INFO L705 BuchiCegarLoop]: Abstraction has 98222 states and 178502 transitions. [2018-11-18 08:44:41,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98222 states and 178502 transitions. [2018-11-18 08:44:41,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98222 to 50116. [2018-11-18 08:44:41,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50116 states. [2018-11-18 08:44:42,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50116 states to 50116 states and 91770 transitions. [2018-11-18 08:44:42,240 INFO L728 BuchiCegarLoop]: Abstraction has 50116 states and 91770 transitions. [2018-11-18 08:44:42,241 INFO L608 BuchiCegarLoop]: Abstraction has 50116 states and 91770 transitions. [2018-11-18 08:44:42,241 INFO L442 BuchiCegarLoop]: ======== Iteration 20============ [2018-11-18 08:44:42,241 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50116 states and 91770 transitions. [2018-11-18 08:44:42,311 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 44824 [2018-11-18 08:44:42,311 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:42,311 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:42,313 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:42,313 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:42,313 INFO L794 eck$LassoCheckResult]: Stem: 1343898#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1343899#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1344861#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1344862#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1345086#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1345089#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1345090#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1345310#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1344670#L250 assume !(0 == getOrigin_~person); 1344362#L254 assume !(1 == getOrigin_~person); 1344305#L258 assume !(2 == getOrigin_~person); 1344306#L262 assume !(3 == getOrigin_~person); 1344902#L266 assume !(4 == getOrigin_~person); 1344839#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1344840#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1343264#L1525 assume 0 == initPersonOnFloor_~floor; 1343265#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1343005#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1344813#L1317 assume !(0 == callOnFloor_~floorID); 1345063#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1345064#L1329-2 assume { :end_inline_callOnFloor } true; 1345721#L1669 assume { :end_inline_initPersonOnFloor } true; 1345720#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1345719#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1345718#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1345717#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1343982#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1343983#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1344267#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1344795#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1345722#L2875 assume !(0 != timeShift_~tmp___9~2); 1345314#L2966 assume !(1 == ~doorState~0); 1345298#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1343234#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1343236#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1343835#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1344515#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1346044#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1345731#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1346042#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1346040#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1343785#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1343786#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1345727#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1345728#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1343855#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1343856#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1345971#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1343346#L2710-5 assume { :end_inline_continueInDirection } true; 1343343#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1363651#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1363650#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1363645#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1363643#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1363639#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1363629#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1363628#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1363627#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1363626#L947-3 [2018-11-18 08:44:42,314 INFO L796 eck$LassoCheckResult]: Loop: 1363626#L947-3 assume true; 1363616#L947-1 assume !false; 1363617#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1363587#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1363588#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1363579#L955 assume 1 != cleanup_~tmp___0~3; 1363580#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1363571#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1363572#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1354181#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1354182#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1353938#L1254-22 assume !(0 == isFloorCalling_~floorID); 1353939#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1353930#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1353931#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1353922#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1353923#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1353910#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1353911#L1254-26 assume !(0 == isFloorCalling_~floorID); 1368756#L1258-26 assume !(1 == isFloorCalling_~floorID); 1368758#L1262-26 assume !(2 == isFloorCalling_~floorID); 1368747#L1266-26 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1368746#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1368745#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1368744#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1368743#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1368742#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 1368740#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1368739#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1368737#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1368736#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1368734#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1368733#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1368732#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1368731#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1368730#L2487-2 assume !(0 == ~currentFloorID~0); 1368728#L2493-2 assume !(~currentFloorID~0 > 0); 1368724#L2508-2 assume !(~currentFloorID~0 > 0); 1368720#L2521-2 assume !(~currentFloorID~0 > 1); 1368682#L2537-2 assume ~currentFloorID~0 > 1; 1368719#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1368679#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1368670#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1368665#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1363792#L2694-3 assume !(1 == ~currentHeading~0); 1363787#L2704-9 assume !(0 == ~currentFloorID~0); 1363727#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1363718#L2710-7 assume { :end_inline_continueInDirection } true; 1363713#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1363714#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1363708#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1363689#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1363691#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1363665#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1363668#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1363659#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1363625#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1363626#L947-3 [2018-11-18 08:44:42,314 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:42,314 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 4 times [2018-11-18 08:44:42,314 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:42,314 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:42,315 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:42,315 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:42,315 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:42,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:43,024 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:43,025 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:43,025 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:44:43,025 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:43,025 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:43,025 INFO L82 PathProgramCache]: Analyzing trace with hash -94740591, now seen corresponding path program 1 times [2018-11-18 08:44:43,025 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:43,025 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:43,026 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:43,026 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:43,026 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:43,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:43,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:43,061 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:43,061 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:44:43,062 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:43,062 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:44:43,062 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:44:43,062 INFO L87 Difference]: Start difference. First operand 50116 states and 91770 transitions. cyclomatic complexity: 41656 Second operand 4 states. [2018-11-18 08:44:52,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:52,807 INFO L93 Difference]: Finished difference Result 69640 states and 126484 transitions. [2018-11-18 08:44:52,807 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:44:52,807 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69640 states and 126484 transitions. [2018-11-18 08:44:53,005 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 64012 [2018-11-18 08:44:53,145 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69640 states to 69488 states and 126312 transitions. [2018-11-18 08:44:53,145 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69488 [2018-11-18 08:44:53,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69488 [2018-11-18 08:44:53,186 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69488 states and 126312 transitions. [2018-11-18 08:44:53,219 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:53,219 INFO L705 BuchiCegarLoop]: Abstraction has 69488 states and 126312 transitions. [2018-11-18 08:44:53,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69488 states and 126312 transitions. [2018-11-18 08:44:53,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69488 to 67030. [2018-11-18 08:44:53,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 67030 states. [2018-11-18 08:44:53,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67030 states to 67030 states and 122422 transitions. [2018-11-18 08:44:53,671 INFO L728 BuchiCegarLoop]: Abstraction has 67030 states and 122422 transitions. [2018-11-18 08:44:53,671 INFO L608 BuchiCegarLoop]: Abstraction has 67030 states and 122422 transitions. [2018-11-18 08:44:53,671 INFO L442 BuchiCegarLoop]: ======== Iteration 21============ [2018-11-18 08:44:53,671 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 67030 states and 122422 transitions. [2018-11-18 08:44:53,805 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 61738 [2018-11-18 08:44:53,805 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:44:53,805 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:44:53,808 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:53,808 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:44:53,808 INFO L794 eck$LassoCheckResult]: Stem: 1463649#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1463650#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1464601#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1464602#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1464825#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1464828#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1464829#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1465033#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1464407#L250 assume !(0 == getOrigin_~person); 1464111#L254 assume !(1 == getOrigin_~person); 1464057#L258 assume !(2 == getOrigin_~person); 1464058#L262 assume !(3 == getOrigin_~person); 1464639#L266 assume !(4 == getOrigin_~person); 1464580#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1464581#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1463029#L1525 assume 0 == initPersonOnFloor_~floor; 1463030#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1462772#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1464550#L1317 assume !(0 == callOnFloor_~floorID); 1464801#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1464802#L1329-2 assume { :end_inline_callOnFloor } true; 1465739#L1669 assume { :end_inline_initPersonOnFloor } true; 1465738#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1465737#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1465736#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1465735#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1465734#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1465733#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1465732#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1465731#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1465730#L2875 assume !(0 != timeShift_~tmp___9~2); 1465729#L2966 assume !(1 == ~doorState~0); 1465728#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1465727#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1465726#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1465725#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1465522#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1465523#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1465460#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1465461#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1465867#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1463544#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1463545#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1465443#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1465444#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1463611#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1463612#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1465675#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1463109#L2710-5 assume { :end_inline_continueInDirection } true; 1463106#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1464380#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1464884#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1479956#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1479955#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1479890#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1463477#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1462814#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1463468#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1464710#L947-3 [2018-11-18 08:44:53,808 INFO L796 eck$LassoCheckResult]: Loop: 1464710#L947-3 assume true; 1483869#L947-1 assume !false; 1483866#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1483862#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1483859#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1483856#L955 assume 1 != cleanup_~tmp___0~3; 1483853#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1483752#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1483681#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1483617#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1483614#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1483615#L1254-22 assume !(0 == isFloorCalling_~floorID); 1519435#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1519434#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1519433#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1508542#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1519432#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1519431#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1519417#L1254-26 assume !(0 == isFloorCalling_~floorID); 1519414#L1258-26 assume !(1 == isFloorCalling_~floorID); 1519411#L1262-26 assume !(2 == isFloorCalling_~floorID); 1519412#L1266-26 assume !(3 == isFloorCalling_~floorID); 1519479#L1270-26 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1522187#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1522182#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1522183#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1522996#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1522995#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 1522985#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1522188#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1522184#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1522185#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1527213#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1527212#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1527211#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1527209#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1527208#L2487-2 assume !(0 == ~currentFloorID~0); 1527207#L2493-2 assume !(~currentFloorID~0 > 0); 1527203#L2508-2 assume !(~currentFloorID~0 > 0); 1527200#L2521-2 assume !(~currentFloorID~0 > 1); 1527192#L2537-2 assume ~currentFloorID~0 > 1; 1527191#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1527190#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1527168#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1527163#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1502246#L2694-3 assume !(1 == ~currentHeading~0); 1502244#L2704-9 assume !(0 == ~currentFloorID~0); 1469654#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1463113#L2710-7 assume { :end_inline_continueInDirection } true; 1463083#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1484539#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1483928#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1483908#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1483905#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1483886#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1483889#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1483877#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1483874#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1464710#L947-3 [2018-11-18 08:44:53,809 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:53,809 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 5 times [2018-11-18 08:44:53,809 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:53,809 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:53,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:53,810 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:44:53,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:53,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:54,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:54,493 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:54,493 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:44:54,494 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:44:54,494 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:44:54,494 INFO L82 PathProgramCache]: Analyzing trace with hash 475695325, now seen corresponding path program 1 times [2018-11-18 08:44:54,494 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:44:54,494 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:44:54,495 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:54,495 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:44:54,495 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:44:54,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:44:54,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:44:54,516 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:44:54,516 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:44:54,516 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:44:54,516 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:44:54,516 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:44:54,517 INFO L87 Difference]: Start difference. First operand 67030 states and 122422 transitions. cyclomatic complexity: 55394 Second operand 5 states. [2018-11-18 08:44:56,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:44:56,369 INFO L93 Difference]: Finished difference Result 130838 states and 238134 transitions. [2018-11-18 08:44:56,369 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:44:56,369 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130838 states and 238134 transitions. [2018-11-18 08:44:56,754 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 122218 [2018-11-18 08:44:57,062 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130838 states to 130838 states and 238134 transitions. [2018-11-18 08:44:57,063 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130838 [2018-11-18 08:44:57,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130838 [2018-11-18 08:44:57,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130838 states and 238134 transitions. [2018-11-18 08:44:57,208 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:44:57,209 INFO L705 BuchiCegarLoop]: Abstraction has 130838 states and 238134 transitions. [2018-11-18 08:44:57,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130838 states and 238134 transitions. [2018-11-18 08:45:00,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130838 to 66638. [2018-11-18 08:45:00,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 66638 states. [2018-11-18 08:45:00,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66638 states to 66638 states and 121862 transitions. [2018-11-18 08:45:00,223 INFO L728 BuchiCegarLoop]: Abstraction has 66638 states and 121862 transitions. [2018-11-18 08:45:00,223 INFO L608 BuchiCegarLoop]: Abstraction has 66638 states and 121862 transitions. [2018-11-18 08:45:00,223 INFO L442 BuchiCegarLoop]: ======== Iteration 22============ [2018-11-18 08:45:00,223 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66638 states and 121862 transitions. [2018-11-18 08:45:00,359 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 61346 [2018-11-18 08:45:00,359 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:00,359 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:00,361 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:00,361 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:00,361 INFO L794 eck$LassoCheckResult]: Stem: 1661555#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1661556#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1662503#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1662504#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1662726#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1662731#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1662732#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1662939#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1662316#L250 assume !(0 == getOrigin_~person); 1662015#L254 assume !(1 == getOrigin_~person); 1661960#L258 assume !(2 == getOrigin_~person); 1661961#L262 assume !(3 == getOrigin_~person); 1662546#L266 assume !(4 == getOrigin_~person); 1662483#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1662484#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1660924#L1525 assume 0 == initPersonOnFloor_~floor; 1660925#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1660664#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1662455#L1317 assume !(0 == callOnFloor_~floorID); 1662702#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1662703#L1329-2 assume { :end_inline_callOnFloor } true; 1663326#L1669 assume { :end_inline_initPersonOnFloor } true; 1663322#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1663323#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1663318#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1663319#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1661639#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1661640#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1662436#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1662438#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1663327#L2875 assume !(0 != timeShift_~tmp___9~2); 1663328#L2966 assume !(1 == ~doorState~0); 1662930#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1662931#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1661494#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1661495#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1663441#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1663442#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1663340#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1663433#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1663423#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1661445#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1661446#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1663336#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1663337#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1661515#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1661516#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1661628#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1661004#L2710-5 assume { :end_inline_continueInDirection } true; 1661001#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1677101#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1677102#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1686994#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1686993#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1677022#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1661375#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1660706#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1662616#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1662617#L947-3 [2018-11-18 08:45:00,362 INFO L796 eck$LassoCheckResult]: Loop: 1662617#L947-3 assume true; 1697870#L947-1 assume !false; 1697869#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1697868#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1697867#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1697866#L955 assume 1 != cleanup_~tmp___0~3; 1697865#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1697864#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1697863#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1697862#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1697861#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1697860#L1254-22 assume !(0 == isFloorCalling_~floorID); 1697859#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1697858#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1697857#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1686943#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1697856#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1697850#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1697525#L1254-26 assume !(0 == isFloorCalling_~floorID); 1696619#L1258-26 assume !(1 == isFloorCalling_~floorID); 1696620#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1709485#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1709476#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1709477#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1709484#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1709481#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1709480#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1709478#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1709479#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1710277#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1710275#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1710274#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1710273#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1710272#L2487-2 assume !(0 == ~currentFloorID~0); 1710271#L2493-2 assume ~currentFloorID~0 > 0; 1710268#L2494-2 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1710265#L2508-2 assume ~currentFloorID~0 > 0; 1710263#L2510-2 assume !(0 != stopRequestedInDirection_~respectInLiftCalls); 1710259#L2521-2 assume ~currentFloorID~0 > 1; 1710256#L2523-2 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1710252#L2537-2 assume ~currentFloorID~0 > 1; 1710258#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1710249#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1710247#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1710245#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1693725#L2694-3 assume !(1 == ~currentHeading~0); 1693718#L2704-9 assume !(0 == ~currentFloorID~0); 1663114#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1690782#L2710-7 assume { :end_inline_continueInDirection } true; 1690779#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1690766#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1690767#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1697886#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1697885#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1697878#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1697881#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1697872#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1697871#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1662617#L947-3 [2018-11-18 08:45:00,362 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:00,362 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 6 times [2018-11-18 08:45:00,362 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:00,362 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:00,363 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:00,363 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:00,363 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:00,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:01,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:01,055 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:01,055 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:45:01,055 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:01,055 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:01,055 INFO L82 PathProgramCache]: Analyzing trace with hash -745677971, now seen corresponding path program 1 times [2018-11-18 08:45:01,055 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:01,055 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:01,056 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:01,056 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:01,056 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:01,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:01,074 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:01,075 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:01,075 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:01,075 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:01,075 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:01,075 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:01,075 INFO L87 Difference]: Start difference. First operand 66638 states and 121862 transitions. cyclomatic complexity: 55226 Second operand 4 states. [2018-11-18 08:45:01,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:01,451 INFO L93 Difference]: Finished difference Result 73563 states and 133217 transitions. [2018-11-18 08:45:01,452 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 08:45:01,452 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 73563 states and 133217 transitions. [2018-11-18 08:45:01,668 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 67961 [2018-11-18 08:45:01,820 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 73563 states to 73563 states and 133217 transitions. [2018-11-18 08:45:01,820 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 73563 [2018-11-18 08:45:01,865 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 73563 [2018-11-18 08:45:01,865 INFO L73 IsDeterministic]: Start isDeterministic. Operand 73563 states and 133217 transitions. [2018-11-18 08:45:01,901 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:01,901 INFO L705 BuchiCegarLoop]: Abstraction has 73563 states and 133217 transitions. [2018-11-18 08:45:01,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73563 states and 133217 transitions. [2018-11-18 08:45:02,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73563 to 66638. [2018-11-18 08:45:02,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 66638 states. [2018-11-18 08:45:02,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66638 states to 66638 states and 121494 transitions. [2018-11-18 08:45:02,410 INFO L728 BuchiCegarLoop]: Abstraction has 66638 states and 121494 transitions. [2018-11-18 08:45:02,410 INFO L608 BuchiCegarLoop]: Abstraction has 66638 states and 121494 transitions. [2018-11-18 08:45:02,410 INFO L442 BuchiCegarLoop]: ======== Iteration 23============ [2018-11-18 08:45:02,410 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66638 states and 121494 transitions. [2018-11-18 08:45:02,547 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 61346 [2018-11-18 08:45:02,548 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:02,548 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:02,550 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:02,550 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:02,550 INFO L794 eck$LassoCheckResult]: Stem: 1801748#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1801749#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1802679#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1802680#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1802883#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1802886#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1802887#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1803091#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1802505#L250 assume !(0 == getOrigin_~person); 1802203#L254 assume !(1 == getOrigin_~person); 1802145#L258 assume !(2 == getOrigin_~person); 1802146#L262 assume !(3 == getOrigin_~person); 1802705#L266 assume !(4 == getOrigin_~person); 1802660#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1802661#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1801135#L1525 assume 0 == initPersonOnFloor_~floor; 1801136#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1800879#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1802634#L1317 assume !(0 == callOnFloor_~floorID); 1802859#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1802860#L1329-2 assume { :end_inline_callOnFloor } true; 1803456#L1669 assume { :end_inline_initPersonOnFloor } true; 1803452#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1803453#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1803448#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1803449#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1801830#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1801831#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1802616#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1802618#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1803457#L2875 assume !(0 != timeShift_~tmp___9~2); 1803458#L2966 assume !(1 == ~doorState~0); 1803079#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1803080#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1801689#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1801690#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1803695#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1803694#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1803679#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1803693#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1803692#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1801640#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1801641#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1803058#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1803439#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1803440#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1803248#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1803249#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1801211#L2710-5 assume { :end_inline_continueInDirection } true; 1801208#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1841519#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1841276#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1841268#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1845830#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1830096#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1830085#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1830086#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1830080#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1830079#L947-3 [2018-11-18 08:45:02,551 INFO L796 eck$LassoCheckResult]: Loop: 1830079#L947-3 assume true; 1830074#L947-1 assume !false; 1830075#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1830070#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1830071#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1840980#L955 assume 1 != cleanup_~tmp___0~3; 1829618#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1829619#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1829608#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1829609#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1829598#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1829600#L1254-22 assume !(0 == isFloorCalling_~floorID); 1829589#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1829590#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1829581#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1829097#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1829098#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1829029#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1829030#L1254-26 assume !(0 == isFloorCalling_~floorID); 1829569#L1258-26 assume !(1 == isFloorCalling_~floorID); 1829554#L1262-26 assume !(2 == isFloorCalling_~floorID); 1829555#L1266-26 assume !(3 == isFloorCalling_~floorID); 1857018#L1270-26 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1857149#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1857142#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1857139#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1857136#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1857128#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 1857124#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 1857121#L2147-1 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1857118#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1857116#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1857107#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1857104#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1857088#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1857073#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1857070#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1857066#L2487-2 assume !(0 == ~currentFloorID~0); 1857061#L2493-2 assume !(~currentFloorID~0 > 0); 1857057#L2508-2 assume !(~currentFloorID~0 > 0); 1857051#L2521-2 assume !(~currentFloorID~0 > 1); 1857022#L2537-2 assume ~currentFloorID~0 > 1; 1857146#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1857023#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1856973#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1856965#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1853731#L2694-3 assume !(1 == ~currentHeading~0); 1853727#L2704-9 assume !(0 == ~currentFloorID~0); 1803256#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1853715#L2710-7 assume { :end_inline_continueInDirection } true; 1853710#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1853708#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1853699#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1853680#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1853654#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1830106#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1830109#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1830100#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1830078#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1830079#L947-3 [2018-11-18 08:45:02,551 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:02,551 INFO L82 PathProgramCache]: Analyzing trace with hash -1152865177, now seen corresponding path program 7 times [2018-11-18 08:45:02,551 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:02,551 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:02,552 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:02,552 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:02,552 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:02,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:03,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:03,268 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:03,268 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:45:03,268 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:03,268 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:03,268 INFO L82 PathProgramCache]: Analyzing trace with hash -1577417301, now seen corresponding path program 1 times [2018-11-18 08:45:03,268 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:03,269 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:03,275 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:03,275 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:03,276 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:03,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:03,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:03,307 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:03,307 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:03,307 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:03,307 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 08:45:03,307 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 08:45:03,308 INFO L87 Difference]: Start difference. First operand 66638 states and 121494 transitions. cyclomatic complexity: 54858 Second operand 6 states. [2018-11-18 08:45:03,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:03,490 INFO L93 Difference]: Finished difference Result 66632 states and 121481 transitions. [2018-11-18 08:45:03,491 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 08:45:03,491 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66632 states and 121481 transitions. [2018-11-18 08:45:03,686 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 61346 [2018-11-18 08:45:03,826 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66632 states to 66632 states and 121481 transitions. [2018-11-18 08:45:03,826 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66632 [2018-11-18 08:45:03,866 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66632 [2018-11-18 08:45:03,866 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66632 states and 121481 transitions. [2018-11-18 08:45:03,897 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:03,897 INFO L705 BuchiCegarLoop]: Abstraction has 66632 states and 121481 transitions. [2018-11-18 08:45:03,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66632 states and 121481 transitions. [2018-11-18 08:45:04,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66632 to 66632. [2018-11-18 08:45:04,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 66632 states. [2018-11-18 08:45:04,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66632 states to 66632 states and 121481 transitions. [2018-11-18 08:45:04,725 INFO L728 BuchiCegarLoop]: Abstraction has 66632 states and 121481 transitions. [2018-11-18 08:45:04,726 INFO L608 BuchiCegarLoop]: Abstraction has 66632 states and 121481 transitions. [2018-11-18 08:45:04,726 INFO L442 BuchiCegarLoop]: ======== Iteration 24============ [2018-11-18 08:45:04,726 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66632 states and 121481 transitions. [2018-11-18 08:45:04,859 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 61346 [2018-11-18 08:45:04,859 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:04,859 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:04,861 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:04,861 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:04,861 INFO L794 eck$LassoCheckResult]: Stem: 1935049#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1935050#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 1935982#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1935983#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1936203#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1936206#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 1936207#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1936422#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1935803#L250 assume !(0 == getOrigin_~person); 1935494#L254 assume !(1 == getOrigin_~person); 1935438#L258 assume !(2 == getOrigin_~person); 1935439#L262 assume !(3 == getOrigin_~person); 1936012#L266 assume !(4 == getOrigin_~person); 1935963#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1935964#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1934424#L1525 assume !(0 == initPersonOnFloor_~floor); 1934425#L1552 assume 1 == initPersonOnFloor_~floor; 1936607#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 1934167#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1935937#L1317 assume !(0 == callOnFloor_~floorID); 1936179#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1936180#L1329-2 assume { :end_inline_callOnFloor } true; 1939218#L1669 assume { :end_inline_initPersonOnFloor } true; 1936803#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1936804#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1936796#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1936797#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1939119#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1939121#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1939120#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1936836#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1936837#L2875 assume !(0 != timeShift_~tmp___9~2); 1939114#L2966 assume !(1 == ~doorState~0); 1940312#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1940311#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1940310#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1940309#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1940275#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1940264#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1940263#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1940262#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1940261#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1934942#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1934943#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1936795#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1936789#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1935012#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1935013#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1935118#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1934502#L2710-5 assume { :end_inline_continueInDirection } true; 1934499#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1935770#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1936262#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1951764#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1951762#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1936692#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1936693#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1950299#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1950296#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 1950295#L947-3 [2018-11-18 08:45:04,861 INFO L796 eck$LassoCheckResult]: Loop: 1950295#L947-3 assume true; 1950286#L947-1 assume !false; 1950287#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1950278#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1950279#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1950270#L955 assume 1 != cleanup_~tmp___0~3; 1950271#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1950262#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1950263#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1950254#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1950255#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1952144#L1254-22 assume !(0 == isFloorCalling_~floorID); 1952123#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1952114#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1950419#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1949879#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1950812#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1950809#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1950807#L1254-26 assume !(0 == isFloorCalling_~floorID); 1950804#L1258-26 assume !(1 == isFloorCalling_~floorID); 1950801#L1262-26 assume !(2 == isFloorCalling_~floorID); 1950802#L1266-26 assume !(3 == isFloorCalling_~floorID); 1945065#L1270-26 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1945064#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1945063#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1945062#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1945060#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1945058#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 1945057#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 1945054#L2147-1 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1945052#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1945049#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1945047#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1945044#L2875-2 assume !(0 != timeShift_~tmp___9~2); 1945042#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1945040#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1945038#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1945036#L2487-2 assume !(0 == ~currentFloorID~0); 1945033#L2493-2 assume !(~currentFloorID~0 > 0); 1945030#L2508-2 assume !(~currentFloorID~0 > 0); 1945024#L2521-2 assume !(~currentFloorID~0 > 1); 1945021#L2537-2 assume ~currentFloorID~0 > 1; 1945020#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1945019#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1944976#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1944969#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1936890#L2694-3 assume !(1 == ~currentHeading~0); 1935115#L2704-9 assume !(0 == ~currentFloorID~0); 1935116#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1934506#L2710-7 assume { :end_inline_continueInDirection } true; 1934476#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1997531#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1997529#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1997523#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1997522#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1997515#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1997518#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1997508#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1950294#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 1950295#L947-3 [2018-11-18 08:45:04,862 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:04,862 INFO L82 PathProgramCache]: Analyzing trace with hash -355558172, now seen corresponding path program 1 times [2018-11-18 08:45:04,862 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:04,862 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:04,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:04,862 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:04,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:04,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:05,545 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:05,546 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:05,546 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:05,546 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:05,546 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:05,546 INFO L82 PathProgramCache]: Analyzing trace with hash -1577417301, now seen corresponding path program 2 times [2018-11-18 08:45:05,546 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:05,546 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:05,547 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:05,547 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:05,547 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:05,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:05,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:05,586 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:05,586 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:05,586 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:05,586 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:05,586 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:05,586 INFO L87 Difference]: Start difference. First operand 66632 states and 121481 transitions. cyclomatic complexity: 54851 Second operand 4 states. [2018-11-18 08:45:07,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:07,853 INFO L93 Difference]: Finished difference Result 94096 states and 170365 transitions. [2018-11-18 08:45:07,854 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:07,854 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 94096 states and 170365 transitions. [2018-11-18 08:45:08,115 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 88412 [2018-11-18 08:45:08,303 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 94096 states to 93736 states and 169969 transitions. [2018-11-18 08:45:08,304 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 93736 [2018-11-18 08:45:08,360 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 93736 [2018-11-18 08:45:08,360 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93736 states and 169969 transitions. [2018-11-18 08:45:08,401 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:08,401 INFO L705 BuchiCegarLoop]: Abstraction has 93736 states and 169969 transitions. [2018-11-18 08:45:08,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93736 states and 169969 transitions. [2018-11-18 08:45:08,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93736 to 92060. [2018-11-18 08:45:08,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 92060 states. [2018-11-18 08:45:09,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92060 states to 92060 states and 167445 transitions. [2018-11-18 08:45:09,006 INFO L728 BuchiCegarLoop]: Abstraction has 92060 states and 167445 transitions. [2018-11-18 08:45:09,007 INFO L608 BuchiCegarLoop]: Abstraction has 92060 states and 167445 transitions. [2018-11-18 08:45:09,007 INFO L442 BuchiCegarLoop]: ======== Iteration 25============ [2018-11-18 08:45:09,007 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 92060 states and 167445 transitions. [2018-11-18 08:45:09,186 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 86774 [2018-11-18 08:45:09,186 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:09,186 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:09,189 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:09,189 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:09,190 INFO L794 eck$LassoCheckResult]: Stem: 2095802#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2095803#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 2096770#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2096771#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2097006#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2097011#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 2097012#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2097237#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2096578#L250 assume !(0 == getOrigin_~person); 2096257#L254 assume !(1 == getOrigin_~person); 2096200#L258 assume !(2 == getOrigin_~person); 2096201#L262 assume !(3 == getOrigin_~person); 2096809#L266 assume !(4 == getOrigin_~person); 2096749#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2096750#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2095160#L1525 assume !(0 == initPersonOnFloor_~floor); 2095161#L1552 assume 1 == initPersonOnFloor_~floor; 2097464#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 2094904#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2096718#L1317 assume !(0 == callOnFloor_~floorID); 2096983#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2096984#L1329-2 assume { :end_inline_callOnFloor } true; 2097685#L1669 assume { :end_inline_initPersonOnFloor } true; 2097684#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2097683#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2097680#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2097676#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2095887#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2095888#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2096168#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2096701#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2097688#L2875 assume !(0 != timeShift_~tmp___9~2); 2097239#L2966 assume !(1 == ~doorState~0); 2097227#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2095133#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2095135#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2095741#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2097154#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2101738#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2097679#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2097764#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2097759#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2097760#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2097742#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2101682#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2097664#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2097665#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2097441#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2097442#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2095238#L2710-5 assume { :end_inline_continueInDirection } true; 2095235#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2102433#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2102432#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2102427#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2102425#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2102421#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2102411#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2102410#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2102409#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 2102408#L947-3 [2018-11-18 08:45:09,190 INFO L796 eck$LassoCheckResult]: Loop: 2102408#L947-3 assume true; 2102387#L947-1 assume !false; 2102388#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2102353#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2102354#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2102345#L955 assume 1 != cleanup_~tmp___0~3; 2102346#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2102337#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2102338#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2102329#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2102330#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2102320#L1254-22 assume !(0 == isFloorCalling_~floorID); 2102321#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2102308#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2102309#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2102142#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2102143#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2102110#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2102111#L1254-26 assume !(0 == isFloorCalling_~floorID); 2147809#L1258-26 assume !(1 == isFloorCalling_~floorID); 2168173#L1262-26 assume !(2 == isFloorCalling_~floorID); 2168174#L1266-26 assume !(3 == isFloorCalling_~floorID); 2157934#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2157935#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2159822#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2159823#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2159830#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2159829#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 2159828#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 2159827#L2147-1 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2159826#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2159824#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2159825#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2182920#L2875-2 assume !(0 != timeShift_~tmp___9~2); 2182918#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2182917#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2182916#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 2182914#L2487-2 assume !(0 == ~currentFloorID~0); 2182911#L2493-2 assume !(~currentFloorID~0 > 0); 2182908#L2508-2 assume !(~currentFloorID~0 > 0); 2182904#L2521-2 assume !(~currentFloorID~0 > 1); 2182902#L2537-2 assume ~currentFloorID~0 > 1; 2182901#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2182900#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2182869#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2182861#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2106311#L2694-3 assume !(1 == ~currentHeading~0); 2106303#L2704-9 assume !(0 == ~currentFloorID~0); 2101948#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2106136#L2710-7 assume { :end_inline_continueInDirection } true; 2106030#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2102535#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2102508#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2102506#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2102488#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2102457#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2102460#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2102451#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2102407#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 2102408#L947-3 [2018-11-18 08:45:09,190 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:09,190 INFO L82 PathProgramCache]: Analyzing trace with hash -355558172, now seen corresponding path program 2 times [2018-11-18 08:45:09,190 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:09,190 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:09,191 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:09,191 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:09,191 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:09,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:09,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:09,870 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:09,870 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:09,870 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:09,870 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:09,871 INFO L82 PathProgramCache]: Analyzing trace with hash -917885779, now seen corresponding path program 1 times [2018-11-18 08:45:09,871 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:09,871 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:09,871 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:09,871 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:09,871 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:09,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:09,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:09,896 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:09,896 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:09,896 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:09,896 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:45:09,896 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:45:09,896 INFO L87 Difference]: Start difference. First operand 92060 states and 167445 transitions. cyclomatic complexity: 75387 Second operand 5 states. [2018-11-18 08:45:11,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:11,816 INFO L93 Difference]: Finished difference Result 160188 states and 292499 transitions. [2018-11-18 08:45:11,816 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:45:11,816 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 160188 states and 292499 transitions. [2018-11-18 08:45:12,661 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 151720 [2018-11-18 08:45:12,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 160188 states to 160188 states and 292499 transitions. [2018-11-18 08:45:12,970 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 160188 [2018-11-18 08:45:13,057 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 160188 [2018-11-18 08:45:13,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 160188 states and 292499 transitions. [2018-11-18 08:45:13,126 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:13,126 INFO L705 BuchiCegarLoop]: Abstraction has 160188 states and 292499 transitions. [2018-11-18 08:45:13,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160188 states and 292499 transitions. [2018-11-18 08:45:13,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160188 to 83314. [2018-11-18 08:45:13,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83314 states. [2018-11-18 08:45:13,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83314 states to 83314 states and 151741 transitions. [2018-11-18 08:45:13,902 INFO L728 BuchiCegarLoop]: Abstraction has 83314 states and 151741 transitions. [2018-11-18 08:45:13,902 INFO L608 BuchiCegarLoop]: Abstraction has 83314 states and 151741 transitions. [2018-11-18 08:45:13,902 INFO L442 BuchiCegarLoop]: ======== Iteration 26============ [2018-11-18 08:45:13,902 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 83314 states and 151741 transitions. [2018-11-18 08:45:14,065 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 78028 [2018-11-18 08:45:14,065 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:14,065 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:14,067 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:14,067 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:14,067 INFO L794 eck$LassoCheckResult]: Stem: 2348058#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2348059#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 2349004#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2349005#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2349228#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2349232#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 2349233#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2349450#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2348820#L250 assume !(0 == getOrigin_~person); 2348511#L254 assume !(1 == getOrigin_~person); 2348454#L258 assume !(2 == getOrigin_~person); 2348455#L262 assume !(3 == getOrigin_~person); 2349044#L266 assume !(4 == getOrigin_~person); 2348983#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2348984#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2347429#L1525 assume !(0 == initPersonOnFloor_~floor); 2347430#L1552 assume 1 == initPersonOnFloor_~floor; 2349632#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 2347174#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2348956#L1317 assume !(0 == callOnFloor_~floorID); 2349205#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2349206#L1329-2 assume { :end_inline_callOnFloor } true; 2349833#L1669 assume { :end_inline_initPersonOnFloor } true; 2349832#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2349831#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2349828#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2349824#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2348141#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2348142#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2348422#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2348939#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2349836#L2875 assume !(0 != timeShift_~tmp___9~2); 2349454#L2966 assume !(1 == ~doorState~0); 2349437#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2347403#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2347405#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2347998#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2349371#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2349931#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2349827#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2349925#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2349926#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2350172#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2349414#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2349415#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2349817#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2349818#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2349613#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2348128#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2348129#L2710-5 assume { :end_inline_continueInDirection } true; 2368509#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2368510#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2349521#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2347900#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2348868#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2349638#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2368479#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2368480#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2349113#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 2349114#L947-3 [2018-11-18 08:45:14,068 INFO L796 eck$LassoCheckResult]: Loop: 2349114#L947-3 assume true; 2387611#L947-1 assume !false; 2384061#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2384062#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2384042#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2384043#L955 assume 1 != cleanup_~tmp___0~3; 2384030#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2384025#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2384019#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2384020#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2383998#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2383996#L1254-22 assume !(0 == isFloorCalling_~floorID); 2383982#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2383979#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2383980#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2383974#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2383975#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2383968#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2383969#L1254-26 assume !(0 == isFloorCalling_~floorID); 2388213#L1258-26 assume !(1 == isFloorCalling_~floorID); 2388167#L1262-26 assume !(2 == isFloorCalling_~floorID); 2388146#L1266-26 assume !(3 == isFloorCalling_~floorID); 2388147#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2388323#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2388321#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2388320#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2388319#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2388318#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 2388317#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 2388316#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2388315#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2388313#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2388312#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2388310#L2875-2 assume !(0 != timeShift_~tmp___9~2); 2388309#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2388308#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2388307#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 2388305#L2487-2 assume !(0 == ~currentFloorID~0); 2388302#L2493-2 assume !(~currentFloorID~0 > 0); 2388299#L2508-2 assume !(~currentFloorID~0 > 0); 2388295#L2521-2 assume !(~currentFloorID~0 > 1); 2388245#L2537-2 assume ~currentFloorID~0 > 1; 2388292#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2388242#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2388237#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2388232#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2387793#L2694-3 assume !(1 == ~currentHeading~0); 2387788#L2704-9 assume !(0 == ~currentFloorID~0); 2360225#L2704-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2387769#L2710-7 assume { :end_inline_continueInDirection } true; 2387767#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2387753#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2387754#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2387736#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2387737#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2387721#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2387722#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2387695#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2387696#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 2349114#L947-3 [2018-11-18 08:45:14,068 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:14,068 INFO L82 PathProgramCache]: Analyzing trace with hash -355558172, now seen corresponding path program 3 times [2018-11-18 08:45:14,068 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:14,068 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:14,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:14,069 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:14,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:14,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:14,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:14,749 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:14,749 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:14,749 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:14,749 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:14,749 INFO L82 PathProgramCache]: Analyzing trace with hash -895253525, now seen corresponding path program 1 times [2018-11-18 08:45:14,749 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:14,749 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:14,750 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:14,750 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:14,750 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:14,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:14,773 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:14,773 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:14,773 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:14,773 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:14,773 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:14,773 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:14,773 INFO L87 Difference]: Start difference. First operand 83314 states and 151741 transitions. cyclomatic complexity: 68429 Second operand 4 states. [2018-11-18 08:45:15,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:15,334 INFO L93 Difference]: Finished difference Result 160457 states and 292721 transitions. [2018-11-18 08:45:15,334 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:15,334 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 160457 states and 292721 transitions. [2018-11-18 08:45:15,791 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 154839 [2018-11-18 08:45:16,109 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 160457 states to 160143 states and 292345 transitions. [2018-11-18 08:45:16,109 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 160143 [2018-11-18 08:45:16,203 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 160143 [2018-11-18 08:45:16,204 INFO L73 IsDeterministic]: Start isDeterministic. Operand 160143 states and 292345 transitions. [2018-11-18 08:45:16,276 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:16,276 INFO L705 BuchiCegarLoop]: Abstraction has 160143 states and 292345 transitions. [2018-11-18 08:45:16,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160143 states and 292345 transitions. [2018-11-18 08:45:17,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160143 to 140188. [2018-11-18 08:45:17,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140188 states. [2018-11-18 08:45:17,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140188 states to 140188 states and 255899 transitions. [2018-11-18 08:45:17,728 INFO L728 BuchiCegarLoop]: Abstraction has 140188 states and 255899 transitions. [2018-11-18 08:45:17,728 INFO L608 BuchiCegarLoop]: Abstraction has 140188 states and 255899 transitions. [2018-11-18 08:45:17,728 INFO L442 BuchiCegarLoop]: ======== Iteration 27============ [2018-11-18 08:45:17,728 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140188 states and 255899 transitions. [2018-11-18 08:45:18,007 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:18,007 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:18,007 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:18,009 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:18,009 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:18,009 INFO L794 eck$LassoCheckResult]: Stem: 2591827#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2591828#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 2592759#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2592760#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2592972#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2592976#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 2592977#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2593183#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2592587#L250 assume !(0 == getOrigin_~person); 2592272#L254 assume !(1 == getOrigin_~person); 2592216#L258 assume !(2 == getOrigin_~person); 2592217#L262 assume !(3 == getOrigin_~person); 2592787#L266 assume !(4 == getOrigin_~person); 2592742#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2592743#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2591210#L1525 assume !(0 == initPersonOnFloor_~floor); 2591211#L1552 assume 1 == initPersonOnFloor_~floor; 2593358#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 2590954#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2592714#L1317 assume !(0 == callOnFloor_~floorID); 2592949#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2592950#L1329-2 assume { :end_inline_callOnFloor } true; 2593540#L1669 assume { :end_inline_initPersonOnFloor } true; 2593539#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2593538#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2593535#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2593533#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2591909#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2591910#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2592188#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2592697#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2593558#L2875 assume !(0 != timeShift_~tmp___9~2); 2593187#L2966 assume !(1 == ~doorState~0); 2593171#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2591183#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2591185#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2591770#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2592432#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2593589#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2593537#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2593578#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2593555#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2591722#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2591723#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2593534#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2593526#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2591788#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2591789#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2591898#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2591287#L2710-5 assume { :end_inline_continueInDirection } true; 2591284#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2694238#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2694234#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2694227#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2694226#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2694177#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2694167#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2694150#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2694147#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 2694143#L947-3 [2018-11-18 08:45:18,009 INFO L796 eck$LassoCheckResult]: Loop: 2694143#L947-3 assume true; 2694141#L947-1 assume !false; 2694139#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2694137#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2694135#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2694133#L955 assume 1 != cleanup_~tmp___0~3; 2694131#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2694129#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2694127#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2694125#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2694121#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2694119#L1254-22 assume !(0 == isFloorCalling_~floorID); 2694115#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2694113#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2694110#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2674505#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2694102#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2694095#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2694091#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2603826#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2689828#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2689827#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2689820#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2689816#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2689815#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2689812#L2875-2 assume !(0 != timeShift_~tmp___9~2); 2689808#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2689788#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2689787#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 2675645#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2675644#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2675643#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2675642#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2675640#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2675633#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2675634#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2673039#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 2673040#L2328-3 assume !(~currentFloorID~0 < 0); 2675661#L2343-3 assume !(~currentFloorID~0 < 0); 2675659#L2356-3 assume ~currentFloorID~0 < 1; 2675652#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2675651#L1254-38 assume !(0 == isFloorCalling_~floorID); 2675648#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2675646#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 2673041#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2673025#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2673026#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2591979#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2591980#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2675617#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2593528#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2675615#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2630429#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2694224#L2710-9 assume { :end_inline_continueInDirection } true; 2694222#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2694221#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2694220#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2694205#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2694219#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2694160#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2694163#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2694149#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2694146#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 2694143#L947-3 [2018-11-18 08:45:18,010 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:18,010 INFO L82 PathProgramCache]: Analyzing trace with hash -355558172, now seen corresponding path program 4 times [2018-11-18 08:45:18,010 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:18,010 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:18,010 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:18,010 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:18,010 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:18,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:18,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:18,677 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:18,677 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:18,677 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:18,677 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:18,677 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 1 times [2018-11-18 08:45:18,677 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:18,677 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:18,677 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:18,677 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:18,678 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:18,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:18,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:18,698 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:18,698 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:18,698 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:18,698 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:18,698 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:18,698 INFO L87 Difference]: Start difference. First operand 140188 states and 255899 transitions. cyclomatic complexity: 115718 Second operand 4 states. [2018-11-18 08:45:19,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:19,012 INFO L93 Difference]: Finished difference Result 140188 states and 255895 transitions. [2018-11-18 08:45:19,012 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:19,012 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140188 states and 255895 transitions. [2018-11-18 08:45:19,412 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:19,694 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140188 states to 140188 states and 255895 transitions. [2018-11-18 08:45:19,694 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140188 [2018-11-18 08:45:19,776 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140188 [2018-11-18 08:45:19,776 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140188 states and 255895 transitions. [2018-11-18 08:45:19,841 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:19,841 INFO L705 BuchiCegarLoop]: Abstraction has 140188 states and 255895 transitions. [2018-11-18 08:45:19,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140188 states and 255895 transitions. [2018-11-18 08:45:20,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140188 to 140188. [2018-11-18 08:45:20,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140188 states. [2018-11-18 08:45:20,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140188 states to 140188 states and 255895 transitions. [2018-11-18 08:45:20,743 INFO L728 BuchiCegarLoop]: Abstraction has 140188 states and 255895 transitions. [2018-11-18 08:45:20,743 INFO L608 BuchiCegarLoop]: Abstraction has 140188 states and 255895 transitions. [2018-11-18 08:45:20,743 INFO L442 BuchiCegarLoop]: ======== Iteration 28============ [2018-11-18 08:45:20,743 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140188 states and 255895 transitions. [2018-11-18 08:45:21,026 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:21,026 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:21,026 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:21,028 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:21,029 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:21,029 INFO L794 eck$LassoCheckResult]: Stem: 2872223#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2872224#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 2873162#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2873163#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2873384#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2873387#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 2873388#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2873596#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2872984#L250 assume !(0 == getOrigin_~person); 2872671#L254 assume !(1 == getOrigin_~person); 2872615#L258 assume !(2 == getOrigin_~person); 2872616#L262 assume !(3 == getOrigin_~person); 2873190#L266 assume !(4 == getOrigin_~person); 2873143#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2873144#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2871598#L1525 assume !(0 == initPersonOnFloor_~floor); 2871599#L1552 assume 1 == initPersonOnFloor_~floor; 2873786#L1553 assume !(0 == initPersonOnFloor_~person); 2873622#L1556 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 2871342#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2873115#L1317 assume !(0 == callOnFloor_~floorID); 2873362#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2873363#L1329-2 assume { :end_inline_callOnFloor } true; 2946737#L1669 assume { :end_inline_initPersonOnFloor } true; 2946736#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2946735#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2946734#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2946733#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2946732#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2946731#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2946729#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2946728#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2946726#L2875 assume !(0 != timeShift_~tmp___9~2); 2946725#L2966 assume !(1 == ~doorState~0); 2946724#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2946722#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2946721#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2946718#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2873522#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2946717#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2946525#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2946716#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2873998#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2873999#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2946492#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2873973#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2873964#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2872186#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2872187#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2872291#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2872292#L2710-5 assume { :end_inline_continueInDirection } true; 2872953#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2872954#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2873670#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2872073#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2873028#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2873790#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2873870#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2872036#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2872037#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 2970040#L947-3 [2018-11-18 08:45:21,029 INFO L796 eck$LassoCheckResult]: Loop: 2970040#L947-3 assume true; 2970038#L947-1 assume !false; 2970036#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2970034#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2970033#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2970032#L955 assume 1 != cleanup_~tmp___0~3; 2970025#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2970023#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2970022#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2970021#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2970012#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2970014#L1254-22 assume !(0 == isFloorCalling_~floorID); 2974122#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2974120#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2964190#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2964188#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2964186#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2964183#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2964184#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2917546#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2963758#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2963756#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2963752#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2963749#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2963747#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2963745#L2875-2 assume !(0 != timeShift_~tmp___9~2); 2963744#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2963743#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2963742#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 2963741#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2963740#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2963739#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2963737#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2963736#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2963735#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2963729#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2963689#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 2963690#L2328-3 assume !(~currentFloorID~0 < 0); 2963720#L2343-3 assume !(~currentFloorID~0 < 0); 2963719#L2356-3 assume ~currentFloorID~0 < 1; 2963717#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2963716#L1254-38 assume !(0 == isFloorCalling_~floorID); 2963715#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2963713#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 2963699#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2963685#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2963682#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2963670#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2963667#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2963664#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2963665#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 2963661#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 2906033#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2974163#L2710-9 assume { :end_inline_continueInDirection } true; 2974161#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2974725#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2970086#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2970079#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2970077#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2970060#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2970063#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2970052#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2970042#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 2970040#L947-3 [2018-11-18 08:45:21,029 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:21,030 INFO L82 PathProgramCache]: Analyzing trace with hash -308623612, now seen corresponding path program 1 times [2018-11-18 08:45:21,030 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:21,030 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:21,030 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:21,030 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:21,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:21,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:21,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:21,723 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:21,723 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:21,723 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:21,723 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:21,723 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 2 times [2018-11-18 08:45:21,723 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:21,723 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:21,724 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:21,724 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:21,724 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:21,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:21,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:21,747 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:21,747 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:21,748 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:21,748 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:21,748 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:21,748 INFO L87 Difference]: Start difference. First operand 140188 states and 255895 transitions. cyclomatic complexity: 115714 Second operand 4 states. [2018-11-18 08:45:22,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:22,075 INFO L93 Difference]: Finished difference Result 140188 states and 255891 transitions. [2018-11-18 08:45:22,076 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:22,076 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140188 states and 255891 transitions. [2018-11-18 08:45:23,105 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:23,325 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140188 states to 140188 states and 255891 transitions. [2018-11-18 08:45:23,325 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140188 [2018-11-18 08:45:23,404 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140188 [2018-11-18 08:45:23,404 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140188 states and 255891 transitions. [2018-11-18 08:45:23,462 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:23,462 INFO L705 BuchiCegarLoop]: Abstraction has 140188 states and 255891 transitions. [2018-11-18 08:45:23,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140188 states and 255891 transitions. [2018-11-18 08:45:24,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140188 to 140188. [2018-11-18 08:45:24,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140188 states. [2018-11-18 08:45:24,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140188 states to 140188 states and 255891 transitions. [2018-11-18 08:45:24,399 INFO L728 BuchiCegarLoop]: Abstraction has 140188 states and 255891 transitions. [2018-11-18 08:45:24,399 INFO L608 BuchiCegarLoop]: Abstraction has 140188 states and 255891 transitions. [2018-11-18 08:45:24,399 INFO L442 BuchiCegarLoop]: ======== Iteration 29============ [2018-11-18 08:45:24,399 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140188 states and 255891 transitions. [2018-11-18 08:45:24,683 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:24,683 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:24,683 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:24,684 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:24,685 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:24,685 INFO L794 eck$LassoCheckResult]: Stem: 3152597#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3152598#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 3153507#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3153508#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3153715#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3153719#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 3153720#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3153918#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3153339#L250 assume !(0 == getOrigin_~person); 3153036#L254 assume !(1 == getOrigin_~person); 3152986#L258 assume !(2 == getOrigin_~person); 3152987#L262 assume !(3 == getOrigin_~person); 3153535#L266 assume !(4 == getOrigin_~person); 3153489#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3153490#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3151986#L1525 assume !(0 == initPersonOnFloor_~floor); 3151987#L1552 assume 1 == initPersonOnFloor_~floor; 3154094#L1553 assume !(0 == initPersonOnFloor_~person); 3153941#L1556 assume !(1 == initPersonOnFloor_~person); 3152672#L1559 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 3151730#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3153463#L1317 assume !(0 == callOnFloor_~floorID); 3153694#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3153695#L1329-2 assume { :end_inline_callOnFloor } true; 3187737#L1669 assume { :end_inline_initPersonOnFloor } true; 3187736#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3187735#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3187734#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3187733#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3187732#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3187731#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3187729#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3187728#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3187727#L2875 assume !(0 != timeShift_~tmp___9~2); 3153921#L2966 assume !(1 == ~doorState~0); 3153905#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3151959#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3151961#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3152540#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3152929#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3154327#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3154274#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3154317#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3154293#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3152491#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3152492#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3154271#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3154263#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3152559#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3152560#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3152664#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3152665#L2710-5 assume { :end_inline_continueInDirection } true; 3231616#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3231615#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3231614#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3231605#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3231617#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3229586#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3229576#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3229574#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3229573#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 3229571#L947-3 [2018-11-18 08:45:24,685 INFO L796 eck$LassoCheckResult]: Loop: 3229571#L947-3 assume true; 3229569#L947-1 assume !false; 3229568#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3229566#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3229565#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3229564#L955 assume 1 != cleanup_~tmp___0~3; 3229563#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3229557#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3229555#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3229554#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3229552#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3229550#L1254-22 assume !(0 == isFloorCalling_~floorID); 3229533#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3229531#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3229527#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3206811#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3261060#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3261058#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3261054#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3216767#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3229520#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3229519#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3229518#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3229516#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3229515#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3229513#L2875-2 assume !(0 != timeShift_~tmp___9~2); 3229511#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3229510#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3229509#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 3229503#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3229501#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3229500#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3229499#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3229498#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3229496#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3229495#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3229494#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 3229493#L2328-3 assume !(~currentFloorID~0 < 0); 3229491#L2343-3 assume !(~currentFloorID~0 < 0); 3229485#L2356-3 assume ~currentFloorID~0 < 1; 3229483#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3229482#L1254-38 assume !(0 == isFloorCalling_~floorID); 3229481#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3229479#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 3229461#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3229450#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3229449#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3229063#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3229060#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3229057#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3229058#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3229054#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3168128#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3229616#L2710-9 assume { :end_inline_continueInDirection } true; 3229612#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3229611#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3229609#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3229603#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3229602#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3229595#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3229598#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3229575#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3229572#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 3229571#L947-3 [2018-11-18 08:45:24,685 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:24,686 INFO L82 PathProgramCache]: Analyzing trace with hash 1766713983, now seen corresponding path program 1 times [2018-11-18 08:45:24,686 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:24,686 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:24,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:24,686 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:24,687 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:24,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:25,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:25,357 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:25,357 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:25,357 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:25,358 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:25,358 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 3 times [2018-11-18 08:45:25,358 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:25,358 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:25,358 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:25,358 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:25,358 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:25,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:25,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:25,381 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:25,382 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:25,382 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:25,382 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:25,382 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:25,382 INFO L87 Difference]: Start difference. First operand 140188 states and 255891 transitions. cyclomatic complexity: 115710 Second operand 4 states. [2018-11-18 08:45:25,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:25,696 INFO L93 Difference]: Finished difference Result 140188 states and 255887 transitions. [2018-11-18 08:45:25,696 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:25,696 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140188 states and 255887 transitions. [2018-11-18 08:45:26,093 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:26,377 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140188 states to 140188 states and 255887 transitions. [2018-11-18 08:45:26,377 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140188 [2018-11-18 08:45:26,460 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140188 [2018-11-18 08:45:26,460 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140188 states and 255887 transitions. [2018-11-18 08:45:26,524 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:26,524 INFO L705 BuchiCegarLoop]: Abstraction has 140188 states and 255887 transitions. [2018-11-18 08:45:26,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140188 states and 255887 transitions. [2018-11-18 08:45:27,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140188 to 140188. [2018-11-18 08:45:27,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140188 states. [2018-11-18 08:45:31,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140188 states to 140188 states and 255887 transitions. [2018-11-18 08:45:31,101 INFO L728 BuchiCegarLoop]: Abstraction has 140188 states and 255887 transitions. [2018-11-18 08:45:31,101 INFO L608 BuchiCegarLoop]: Abstraction has 140188 states and 255887 transitions. [2018-11-18 08:45:31,101 INFO L442 BuchiCegarLoop]: ======== Iteration 30============ [2018-11-18 08:45:31,101 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140188 states and 255887 transitions. [2018-11-18 08:45:31,374 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:31,374 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:31,374 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:31,376 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:31,376 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:31,376 INFO L794 eck$LassoCheckResult]: Stem: 3432999#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3433000#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 3433934#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3433935#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3434156#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3434159#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 3434160#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3434376#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3433761#L250 assume !(0 == getOrigin_~person); 3433449#L254 assume !(1 == getOrigin_~person); 3433398#L258 assume !(2 == getOrigin_~person); 3433399#L262 assume !(3 == getOrigin_~person); 3433967#L266 assume !(4 == getOrigin_~person); 3433915#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3433916#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3432377#L1525 assume !(0 == initPersonOnFloor_~floor); 3432378#L1552 assume !(1 == initPersonOnFloor_~floor); 3433166#L1579 assume !(2 == initPersonOnFloor_~floor); 3432898#L1606 assume !(3 == initPersonOnFloor_~floor); 3432900#L1633 assume !(4 == initPersonOnFloor_~floor); 3432118#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3433887#L1317 assume !(0 == callOnFloor_~floorID); 3434135#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3434136#L1329-2 assume { :end_inline_callOnFloor } true; 3434766#L1669 assume { :end_inline_initPersonOnFloor } true; 3434765#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3434764#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3434761#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3434759#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3433083#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3433084#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3433364#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3433870#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3434785#L2875 assume !(0 != timeShift_~tmp___9~2); 3434378#L2966 assume !(1 == ~doorState~0); 3434363#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3432347#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3432349#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3432943#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3433338#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3434815#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3434763#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3434805#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3434782#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3432895#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3432896#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3434760#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3434754#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3432962#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3432963#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3434549#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3530159#L2710-5 assume { :end_inline_continueInDirection } true; 3530158#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3530157#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3530156#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3530148#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3530146#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3515263#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3432829#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3432160#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3434038#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 3434039#L947-3 [2018-11-18 08:45:31,376 INFO L796 eck$LassoCheckResult]: Loop: 3434039#L947-3 assume true; 3539883#L947-1 assume !false; 3539882#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3539881#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3539880#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3539879#L955 assume 1 != cleanup_~tmp___0~3; 3539878#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3539877#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3539876#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3534196#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3534197#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3534189#L1254-22 assume !(0 == isFloorCalling_~floorID); 3534190#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3530053#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3530054#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3529026#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3529027#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3528993#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3528994#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3475438#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3519418#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3519416#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3519415#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3519413#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3519411#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3519408#L2875-2 assume !(0 != timeShift_~tmp___9~2); 3519406#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3519404#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3519401#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 3519394#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3519393#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3519392#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3518883#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3518869#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3518866#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3518865#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3518864#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 3518863#L2328-3 assume !(~currentFloorID~0 < 0); 3518862#L2343-3 assume !(~currentFloorID~0 < 0); 3518861#L2356-3 assume ~currentFloorID~0 < 1; 3518860#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3518858#L1254-38 assume !(0 == isFloorCalling_~floorID); 3518852#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3518850#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 3509510#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3509500#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3509498#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3505588#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3505585#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3505582#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3505583#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3505579#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3433055#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3432425#L2710-9 assume { :end_inline_continueInDirection } true; 3432426#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3539908#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3539906#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3539900#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3539899#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3539892#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3539895#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3539885#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3539884#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 3434039#L947-3 [2018-11-18 08:45:31,377 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:31,377 INFO L82 PathProgramCache]: Analyzing trace with hash -654049793, now seen corresponding path program 1 times [2018-11-18 08:45:31,377 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:31,377 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:31,377 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:31,377 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:31,377 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:31,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:32,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:32,054 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:32,054 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:32,054 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:32,054 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:32,054 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 4 times [2018-11-18 08:45:32,054 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:32,055 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:32,055 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:32,055 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:32,055 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:32,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:32,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:32,079 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:32,079 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:32,079 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:32,080 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:32,080 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:32,080 INFO L87 Difference]: Start difference. First operand 140188 states and 255887 transitions. cyclomatic complexity: 115706 Second operand 4 states. [2018-11-18 08:45:32,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:32,418 INFO L93 Difference]: Finished difference Result 140167 states and 255853 transitions. [2018-11-18 08:45:32,419 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:32,419 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140167 states and 255853 transitions. [2018-11-18 08:45:32,803 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:33,088 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140167 states to 140167 states and 255853 transitions. [2018-11-18 08:45:33,088 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140167 [2018-11-18 08:45:33,172 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140167 [2018-11-18 08:45:33,172 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140167 states and 255853 transitions. [2018-11-18 08:45:33,235 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:33,235 INFO L705 BuchiCegarLoop]: Abstraction has 140167 states and 255853 transitions. [2018-11-18 08:45:33,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140167 states and 255853 transitions. [2018-11-18 08:45:34,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140167 to 140167. [2018-11-18 08:45:34,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140167 states. [2018-11-18 08:45:34,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140167 states to 140167 states and 255853 transitions. [2018-11-18 08:45:34,500 INFO L728 BuchiCegarLoop]: Abstraction has 140167 states and 255853 transitions. [2018-11-18 08:45:34,501 INFO L608 BuchiCegarLoop]: Abstraction has 140167 states and 255853 transitions. [2018-11-18 08:45:34,501 INFO L442 BuchiCegarLoop]: ======== Iteration 31============ [2018-11-18 08:45:34,501 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140167 states and 255853 transitions. [2018-11-18 08:45:34,773 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:34,773 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:34,773 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:34,775 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:34,775 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:34,775 INFO L794 eck$LassoCheckResult]: Stem: 3713351#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3713352#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 3714259#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3714260#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3714471#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3714475#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 3714476#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3714671#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3714095#L250 assume !(0 == getOrigin_~person); 3713785#L254 assume !(1 == getOrigin_~person); 3713735#L258 assume !(2 == getOrigin_~person); 3713736#L262 assume !(3 == getOrigin_~person); 3714286#L266 assume !(4 == getOrigin_~person); 3714242#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3714243#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3712740#L1525 assume !(0 == initPersonOnFloor_~floor); 3712741#L1552 assume 1 == initPersonOnFloor_~floor; 3714851#L1553 assume !(0 == initPersonOnFloor_~person); 3714691#L1556 assume !(1 == initPersonOnFloor_~person); 3713426#L1559 assume !(2 == initPersonOnFloor_~person); 3713253#L1562 assume 3 == initPersonOnFloor_~person;~personOnFloor_3_1~0 := 1; 3712485#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3714216#L1317 assume !(0 == callOnFloor_~floorID); 3714449#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3714450#L1329-2 assume { :end_inline_callOnFloor } true; 3715038#L1669 assume { :end_inline_initPersonOnFloor } true; 3715036#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3715034#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3715030#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3715029#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3713430#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3713431#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3713702#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3714202#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3715091#L2875 assume !(0 != timeShift_~tmp___9~2); 3714673#L2966 assume !(1 == ~doorState~0); 3714665#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3712714#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3712716#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3713294#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3713679#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3715090#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3715033#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3715087#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3715086#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3713250#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3713251#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3715031#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3715025#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3713313#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3713314#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3713420#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3712814#L2710-5 assume { :end_inline_continueInDirection } true; 3712811#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3794130#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3794129#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3794122#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3794108#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3794079#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3794069#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3794067#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3794065#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 3794062#L947-3 [2018-11-18 08:45:34,776 INFO L796 eck$LassoCheckResult]: Loop: 3794062#L947-3 assume true; 3794060#L947-1 assume !false; 3794058#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3794056#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3794054#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3794052#L955 assume 1 != cleanup_~tmp___0~3; 3794050#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3794048#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3794046#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3794044#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3794040#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3794038#L1254-22 assume !(0 == isFloorCalling_~floorID); 3794036#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3794034#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3794032#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3786103#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3794026#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3794025#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3793927#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3781664#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3781663#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3781661#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3781660#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3781658#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3781652#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3781649#L2875-2 assume !(0 != timeShift_~tmp___9~2); 3781648#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3781647#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3781646#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 3781645#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3781644#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3781642#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3781641#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3781639#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3781638#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3781637#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3781630#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 3781631#L2328-3 assume !(~currentFloorID~0 < 0); 3781700#L2343-3 assume !(~currentFloorID~0 < 0); 3781698#L2356-3 assume ~currentFloorID~0 < 1; 3781696#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3781694#L1254-38 assume !(0 == isFloorCalling_~floorID); 3781691#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3781690#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 3781371#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3781361#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3781359#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3781337#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3781334#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3781331#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3781332#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 3781327#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3781328#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3794143#L2710-9 assume { :end_inline_continueInDirection } true; 3794141#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3794140#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3794138#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3794132#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3794131#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3794115#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3794118#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3794107#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3794064#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 3794062#L947-3 [2018-11-18 08:45:34,776 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:34,776 INFO L82 PathProgramCache]: Analyzing trace with hash -1996931073, now seen corresponding path program 1 times [2018-11-18 08:45:34,776 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:34,776 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:34,776 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:34,776 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:34,776 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:34,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:35,469 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:35,469 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:35,469 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:35,470 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:35,470 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:35,470 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 5 times [2018-11-18 08:45:35,470 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:35,470 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:35,470 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:35,470 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:35,470 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:35,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:35,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:35,501 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:35,501 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:35,501 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:35,501 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:45:35,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:45:35,501 INFO L87 Difference]: Start difference. First operand 140167 states and 255853 transitions. cyclomatic complexity: 115693 Second operand 4 states. [2018-11-18 08:45:35,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:35,821 INFO L93 Difference]: Finished difference Result 140167 states and 255852 transitions. [2018-11-18 08:45:35,821 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:45:35,821 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140167 states and 255852 transitions. [2018-11-18 08:45:36,198 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:36,462 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140167 states to 140167 states and 255852 transitions. [2018-11-18 08:45:36,462 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140167 [2018-11-18 08:45:36,543 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140167 [2018-11-18 08:45:36,543 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140167 states and 255852 transitions. [2018-11-18 08:45:36,602 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:36,602 INFO L705 BuchiCegarLoop]: Abstraction has 140167 states and 255852 transitions. [2018-11-18 08:45:36,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140167 states and 255852 transitions. [2018-11-18 08:45:37,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140167 to 140167. [2018-11-18 08:45:37,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140167 states. [2018-11-18 08:45:37,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140167 states to 140167 states and 255852 transitions. [2018-11-18 08:45:37,937 INFO L728 BuchiCegarLoop]: Abstraction has 140167 states and 255852 transitions. [2018-11-18 08:45:37,937 INFO L608 BuchiCegarLoop]: Abstraction has 140167 states and 255852 transitions. [2018-11-18 08:45:37,937 INFO L442 BuchiCegarLoop]: ======== Iteration 32============ [2018-11-18 08:45:37,937 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140167 states and 255852 transitions. [2018-11-18 08:45:38,217 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 134892 [2018-11-18 08:45:38,217 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:38,217 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:38,219 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:38,219 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:38,219 INFO L794 eck$LassoCheckResult]: Stem: 3993691#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3993692#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 3994598#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3994599#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3994817#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3994820#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 3994821#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3995018#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3994436#L250 assume !(0 == getOrigin_~person); 3994126#L254 assume !(1 == getOrigin_~person); 3994074#L258 assume !(2 == getOrigin_~person); 3994075#L262 assume !(3 == getOrigin_~person); 3994631#L266 assume !(4 == getOrigin_~person); 3994581#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3994582#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3993087#L1525 assume !(0 == initPersonOnFloor_~floor); 3993088#L1552 assume 1 == initPersonOnFloor_~floor; 3995203#L1553 assume !(0 == initPersonOnFloor_~person); 3995040#L1556 assume !(1 == initPersonOnFloor_~person); 3993765#L1559 assume !(2 == initPersonOnFloor_~person); 3993592#L1562 assume !(3 == initPersonOnFloor_~person); 3993160#L1565 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 3992831#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3994555#L1317 assume !(0 == callOnFloor_~floorID); 3994794#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3994795#L1329-2 assume { :end_inline_callOnFloor } true; 3995386#L1669 assume { :end_inline_initPersonOnFloor } true; 3995384#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3995382#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3995378#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3995377#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3993769#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3993770#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3994041#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3994541#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3995458#L2875 assume !(0 != timeShift_~tmp___9~2); 3995020#L2966 assume !(1 == ~doorState~0); 3995010#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3993060#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3993062#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3993635#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3994017#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3995457#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3995381#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3995452#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3995451#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3993588#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3993589#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3995460#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4062130#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4062127#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4062125#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3993759#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3993161#L2710-5 assume { :end_inline_continueInDirection } true; 3993158#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3994401#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3994874#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3993546#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3994477#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3995208#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3993522#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3992873#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3993513#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 3994701#L947-3 [2018-11-18 08:45:38,219 INFO L796 eck$LassoCheckResult]: Loop: 3994701#L947-3 assume true; 4098679#L947-1 assume !false; 4098680#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4098667#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4098668#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 4098655#L955 assume 1 != cleanup_~tmp___0~3; 4098656#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4098643#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4098644#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 4094600#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 4094601#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4098826#L1254-22 assume !(0 == isFloorCalling_~floorID); 4098915#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4098914#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 4098913#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4085495#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4085496#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 4085456#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4085457#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4005388#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4084929#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4084927#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4084925#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4084923#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4084922#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4084920#L2875-2 assume !(0 != timeShift_~tmp___9~2); 4084919#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4084918#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4084917#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 4084916#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4084915#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4084914#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4084912#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4084911#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4084910#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4084904#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4084864#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 4084865#L2328-3 assume !(~currentFloorID~0 < 0); 4084891#L2343-3 assume !(~currentFloorID~0 < 0); 4084890#L2356-3 assume ~currentFloorID~0 < 1; 4084889#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4084888#L1254-38 assume !(0 == isFloorCalling_~floorID); 4084887#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4084886#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 4084874#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4084860#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4084857#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4084837#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4084834#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4084831#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4084832#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4084828#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 3993746#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3993748#L2710-9 assume { :end_inline_continueInDirection } true; 4098780#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4098852#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4098850#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4098840#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4098760#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4098709#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4098712#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4098703#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 4098691#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 3994701#L947-3 [2018-11-18 08:45:38,219 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:38,220 INFO L82 PathProgramCache]: Analyzing trace with hash -2085444582, now seen corresponding path program 1 times [2018-11-18 08:45:38,220 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:38,220 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:38,220 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:38,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:38,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:38,893 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:38,893 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:38,894 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:38,894 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:38,894 INFO L82 PathProgramCache]: Analyzing trace with hash 957177411, now seen corresponding path program 6 times [2018-11-18 08:45:38,894 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:38,894 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:38,894 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:38,894 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:38,895 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:38,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:38,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:38,919 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:38,919 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 08:45:38,919 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:38,919 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 08:45:38,919 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 08:45:38,919 INFO L87 Difference]: Start difference. First operand 140167 states and 255852 transitions. cyclomatic complexity: 115692 Second operand 5 states. [2018-11-18 08:45:40,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:40,466 INFO L93 Difference]: Finished difference Result 521030 states and 951852 transitions. [2018-11-18 08:45:40,466 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 08:45:40,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 521030 states and 951852 transitions. [2018-11-18 08:45:42,495 INFO L131 ngComponentsAnalysis]: Automaton has 19 accepting balls. 514685 [2018-11-18 08:45:43,528 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 521030 states to 521010 states and 951832 transitions. [2018-11-18 08:45:43,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 521010 [2018-11-18 08:45:49,010 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 521010 [2018-11-18 08:45:49,010 INFO L73 IsDeterministic]: Start isDeterministic. Operand 521010 states and 951832 transitions. [2018-11-18 08:45:49,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:49,115 INFO L705 BuchiCegarLoop]: Abstraction has 521010 states and 951832 transitions. [2018-11-18 08:45:49,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 521010 states and 951832 transitions. [2018-11-18 08:45:50,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 521010 to 140303. [2018-11-18 08:45:50,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140303 states. [2018-11-18 08:45:50,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140303 states to 140303 states and 255980 transitions. [2018-11-18 08:45:50,844 INFO L728 BuchiCegarLoop]: Abstraction has 140303 states and 255980 transitions. [2018-11-18 08:45:50,844 INFO L608 BuchiCegarLoop]: Abstraction has 140303 states and 255980 transitions. [2018-11-18 08:45:50,844 INFO L442 BuchiCegarLoop]: ======== Iteration 33============ [2018-11-18 08:45:50,844 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140303 states and 255980 transitions. [2018-11-18 08:45:51,115 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 135024 [2018-11-18 08:45:51,115 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:51,115 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:51,117 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:51,117 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:51,117 INFO L794 eck$LassoCheckResult]: Stem: 4654946#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4654947#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 4655900#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4655901#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4656131#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 4656137#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 4656138#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 4656352#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4655722#L250 assume !(0 == getOrigin_~person); 4655404#L254 assume !(1 == getOrigin_~person); 4655351#L258 assume !(2 == getOrigin_~person); 4655352#L262 assume !(3 == getOrigin_~person); 4655941#L266 assume !(4 == getOrigin_~person); 4655880#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4655881#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4654307#L1525 assume !(0 == initPersonOnFloor_~floor); 4654308#L1552 assume 1 == initPersonOnFloor_~floor; 4656562#L1553 assume !(0 == initPersonOnFloor_~person); 4656377#L1556 assume !(1 == initPersonOnFloor_~person); 4655029#L1559 assume !(2 == initPersonOnFloor_~person); 4654841#L1562 assume !(3 == initPersonOnFloor_~person); 4654383#L1565 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 4654050#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4655854#L1317 assume !(0 == callOnFloor_~floorID); 4656108#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4656109#L1329-2 assume { :end_inline_callOnFloor } true; 4656767#L1669 assume { :end_inline_initPersonOnFloor } true; 4656766#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4656765#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4656764#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4656763#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4655034#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4655035#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4655316#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4655840#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4656768#L2875 assume !(0 != timeShift_~tmp___9~2); 4656356#L2966 assume !(1 == ~doorState~0); 4656357#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4654279#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4654281#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4655567#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4655568#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4710631#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4656771#L2749 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4710630#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4710629#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 4654837#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4654838#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4655685#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4655686#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4654903#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4654904#L2698-6 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 4655022#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4654384#L2710-5 assume { :end_inline_continueInDirection } true; 4654381#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4655693#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4656193#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4654789#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4763819#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4763787#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4763777#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4654753#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 4654754#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 4656010#L947-3 [2018-11-18 08:45:51,117 INFO L796 eck$LassoCheckResult]: Loop: 4656010#L947-3 assume true; 4763750#L947-1 assume !false; 4763746#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4763742#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4763738#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 4763709#L955 assume 1 != cleanup_~tmp___0~3; 4763631#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4763629#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4763627#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 4763625#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 4763622#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4763620#L1254-22 assume !(0 == isFloorCalling_~floorID); 4763618#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4763616#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 4763614#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4711040#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4711041#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 4710981#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4710982#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4710936#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4710935#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4710934#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4710933#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4710928#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4710919#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4710900#L2875-2 assume !(0 != timeShift_~tmp___9~2); 4710887#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4710852#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4710851#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 4710844#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4710831#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4710824#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4710822#L2749-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4710821#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4710819#L2318-3 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4710818#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4710817#L2322-3 assume !(0 != stopRequestedInDirection_~tmp~20); 4710816#L2328-3 assume !(~currentFloorID~0 < 0); 4710815#L2343-3 assume !(~currentFloorID~0 < 0); 4710814#L2356-3 assume ~currentFloorID~0 < 1; 4710813#L2358-3 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4710812#L1254-38 assume !(0 == isFloorCalling_~floorID); 4710811#L1258-38 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4710809#L1281-38 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 4710801#L2362-3 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4710792#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4710791#L2983-3 assume 0 != timeShift_~tmp___7~2;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4710776#L2749-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4710773#L2754-3 timeShift_#t~ret104 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2 := timeShift_#t~ret104;havoc timeShift_#t~ret104;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4710770#L2694-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4710769#L1828-8 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4710766#L2698-12 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 4655010#L2704-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4654356#L2710-9 assume { :end_inline_continueInDirection } true; 4654357#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4764039#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4764036#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4764019#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4764206#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4763811#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4763814#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4763762#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 4763758#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 4656010#L947-3 [2018-11-18 08:45:51,117 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:51,117 INFO L82 PathProgramCache]: Analyzing trace with hash -1267796132, now seen corresponding path program 1 times [2018-11-18 08:45:51,117 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:51,118 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:51,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:51,118 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 08:45:51,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:51,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:51,793 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:51,793 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:51,793 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:51,793 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:51,793 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:51,793 INFO L82 PathProgramCache]: Analyzing trace with hash 255577537, now seen corresponding path program 1 times [2018-11-18 08:45:51,793 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:51,794 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:51,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:51,794 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:51,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:51,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:51,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:51,856 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:51,856 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 08:45:51,857 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:51,857 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 08:45:51,857 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-18 08:45:51,857 INFO L87 Difference]: Start difference. First operand 140303 states and 255980 transitions. cyclomatic complexity: 115684 Second operand 8 states. [2018-11-18 08:45:54,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:45:54,116 INFO L93 Difference]: Finished difference Result 312274 states and 564037 transitions. [2018-11-18 08:45:54,116 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-11-18 08:45:54,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 312274 states and 564037 transitions. [2018-11-18 08:45:55,048 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 306523 [2018-11-18 08:45:55,702 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 312274 states to 312274 states and 564037 transitions. [2018-11-18 08:45:55,702 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 312274 [2018-11-18 08:45:55,889 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 312274 [2018-11-18 08:45:55,889 INFO L73 IsDeterministic]: Start isDeterministic. Operand 312274 states and 564037 transitions. [2018-11-18 08:45:56,027 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:45:56,027 INFO L705 BuchiCegarLoop]: Abstraction has 312274 states and 564037 transitions. [2018-11-18 08:45:56,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312274 states and 564037 transitions. [2018-11-18 08:45:58,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312274 to 142063. [2018-11-18 08:45:58,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 142063 states. [2018-11-18 08:45:58,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142063 states to 142063 states and 258552 transitions. [2018-11-18 08:45:58,150 INFO L728 BuchiCegarLoop]: Abstraction has 142063 states and 258552 transitions. [2018-11-18 08:45:58,150 INFO L608 BuchiCegarLoop]: Abstraction has 142063 states and 258552 transitions. [2018-11-18 08:45:58,150 INFO L442 BuchiCegarLoop]: ======== Iteration 34============ [2018-11-18 08:45:58,150 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 142063 states and 258552 transitions. [2018-11-18 08:45:58,428 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 136848 [2018-11-18 08:45:58,428 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:45:58,429 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:45:58,430 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:58,430 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:45:58,430 INFO L794 eck$LassoCheckResult]: Stem: 5107572#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5107573#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 5108534#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5108535#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5108756#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 5108759#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 5108760#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5108992#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5108351#L250 assume !(0 == getOrigin_~person); 5108028#L254 assume !(1 == getOrigin_~person); 5107970#L258 assume !(2 == getOrigin_~person); 5107971#L262 assume !(3 == getOrigin_~person); 5108566#L266 assume !(4 == getOrigin_~person); 5108513#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5108514#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5106949#L1525 assume !(0 == initPersonOnFloor_~floor); 5106950#L1552 assume 1 == initPersonOnFloor_~floor; 5109193#L1553 assume !(0 == initPersonOnFloor_~person); 5109018#L1556 assume !(1 == initPersonOnFloor_~person); 5107655#L1559 assume !(2 == initPersonOnFloor_~person); 5107465#L1562 assume !(3 == initPersonOnFloor_~person); 5107025#L1565 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 5106694#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5108484#L1317 assume !(0 == callOnFloor_~floorID); 5108731#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 5108732#L1329-2 assume { :end_inline_callOnFloor } true; 5109417#L1669 assume { :end_inline_initPersonOnFloor } true; 5109413#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5109414#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5109409#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5109410#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5107659#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5107660#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5108468#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5108470#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5109418#L2875 assume !(0 != timeShift_~tmp___9~2); 5109419#L2966 assume !(1 == ~doorState~0); 5108976#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5108977#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5107507#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5107508#L2322 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5133466#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5133489#L2974 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 5109427#L2749 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 5133488#L2754 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5133483#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 5107460#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5107461#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 5109423#L2983 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5109424#L2694-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5107528#L1828-4 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5107529#L2698-6 assume !(0 != continueInDirection_~tmp~21); 5107648#L2704-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5107649#L2710-5 assume { :end_inline_continueInDirection } true; 5133440#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5133439#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5133438#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5133433#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5133431#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5133427#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5133417#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5133416#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 5133415#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 5133413#L947-3 [2018-11-18 08:45:58,431 INFO L796 eck$LassoCheckResult]: Loop: 5133413#L947-3 assume true; 5133412#L947-1 assume !false; 5133411#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5133410#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5133409#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 5133333#L955 assume 1 != cleanup_~tmp___0~3; 5133334#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5113319#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5113320#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 5113315#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 5113316#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5113297#L1254-22 assume !(0 == isFloorCalling_~floorID); 5113298#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5113293#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 5113294#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5113288#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5113289#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 5113280#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5113281#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5133764#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5133763#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5133762#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5133761#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5133759#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5133758#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5133756#L2875-2 assume !(0 != timeShift_~tmp___9~2); 5133755#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5133754#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5133752#L2318-2 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5133753#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5134003#L2322-2 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5134268#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5134267#L2974-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 5134266#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 5133974#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5143801#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 5133922#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5133884#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 5125572#L2983-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5125573#L2694-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5125268#L1828-9 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5125269#L2698-15 assume !(0 != continueInDirection_~tmp~21); 5133596#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5133557#L2710-11 assume { :end_inline_continueInDirection } true; 5133556#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5133555#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5133553#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5133548#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5133549#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5133539#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5133542#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5133532#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 5133414#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 5133413#L947-3 [2018-11-18 08:45:58,431 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:58,431 INFO L82 PathProgramCache]: Analyzing trace with hash -1710695272, now seen corresponding path program 1 times [2018-11-18 08:45:58,431 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:58,431 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:58,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:58,432 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:58,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:58,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:59,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:59,125 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:59,125 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:45:59,125 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:45:59,125 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:45:59,125 INFO L82 PathProgramCache]: Analyzing trace with hash -536542901, now seen corresponding path program 1 times [2018-11-18 08:45:59,125 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:45:59,125 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:45:59,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:59,126 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:45:59,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:45:59,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:45:59,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:45:59,177 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:45:59,177 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 08:45:59,177 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 08:45:59,177 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 08:45:59,177 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 08:45:59,177 INFO L87 Difference]: Start difference. First operand 142063 states and 258552 transitions. cyclomatic complexity: 116496 Second operand 6 states. [2018-11-18 08:46:02,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:46:02,965 INFO L93 Difference]: Finished difference Result 347974 states and 637222 transitions. [2018-11-18 08:46:02,965 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 08:46:02,966 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 347974 states and 637222 transitions. [2018-11-18 08:46:03,930 INFO L131 ngComponentsAnalysis]: Automaton has 15 accepting balls. 342493 [2018-11-18 08:46:04,636 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 347974 states to 347974 states and 637222 transitions. [2018-11-18 08:46:04,636 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 347974 [2018-11-18 08:46:04,811 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 347974 [2018-11-18 08:46:04,811 INFO L73 IsDeterministic]: Start isDeterministic. Operand 347974 states and 637222 transitions. [2018-11-18 08:46:04,940 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:46:04,940 INFO L705 BuchiCegarLoop]: Abstraction has 347974 states and 637222 transitions. [2018-11-18 08:46:05,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347974 states and 637222 transitions. [2018-11-18 08:46:07,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347974 to 134293. [2018-11-18 08:46:07,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 134293 states. [2018-11-18 08:46:07,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134293 states to 134293 states and 244170 transitions. [2018-11-18 08:46:07,191 INFO L728 BuchiCegarLoop]: Abstraction has 134293 states and 244170 transitions. [2018-11-18 08:46:07,191 INFO L608 BuchiCegarLoop]: Abstraction has 134293 states and 244170 transitions. [2018-11-18 08:46:07,191 INFO L442 BuchiCegarLoop]: ======== Iteration 35============ [2018-11-18 08:46:07,191 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 134293 states and 244170 transitions. [2018-11-18 08:46:07,470 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 129088 [2018-11-18 08:46:07,470 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:46:07,470 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:46:07,471 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:46:07,471 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:46:07,472 INFO L794 eck$LassoCheckResult]: Stem: 5597667#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5597668#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 5598634#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5598635#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5598863#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 5598866#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 5598867#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5599085#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5598458#L250 assume !(0 == getOrigin_~person); 5598127#L254 assume !(1 == getOrigin_~person); 5598069#L258 assume !(2 == getOrigin_~person); 5598070#L262 assume !(3 == getOrigin_~person); 5598666#L266 assume !(4 == getOrigin_~person); 5598613#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5598614#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5597028#L1525 assume !(0 == initPersonOnFloor_~floor); 5597029#L1552 assume 1 == initPersonOnFloor_~floor; 5599279#L1553 assume !(0 == initPersonOnFloor_~person); 5599112#L1556 assume !(1 == initPersonOnFloor_~person); 5597749#L1559 assume !(2 == initPersonOnFloor_~person); 5597562#L1562 assume !(3 == initPersonOnFloor_~person); 5597105#L1565 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 5596775#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5598585#L1317 assume !(0 == callOnFloor_~floorID); 5598836#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 5598837#L1329-2 assume { :end_inline_callOnFloor } true; 5599500#L1669 assume { :end_inline_initPersonOnFloor } true; 5599501#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5599496#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5599497#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5599491#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5599493#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5598035#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5598036#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5599506#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5599507#L2875 assume !(0 != timeShift_~tmp___9~2); 5599089#L2966 assume !(1 == ~doorState~0); 5599090#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5597004#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5597006#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5598293#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 5598294#L2328 assume !(~currentFloorID~0 < 0); 5599369#L2343 assume !(~currentFloorID~0 < 0); 5599370#L2356 assume ~currentFloorID~0 < 1; 5597088#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5597089#L1254-2 assume !(0 == isFloorCalling_~floorID); 5597325#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5597326#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 5597026#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5596866#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5599510#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5599511#L2694 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5597600#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5597601#L2698 assume !(0 != continueInDirection_~tmp~21); 5597747#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5597748#L2710-1 assume { :end_inline_continueInDirection } true; 5670181#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5670180#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5670179#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5670174#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5670172#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5670168#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5670158#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5670157#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 5670156#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 5670152#L947-3 [2018-11-18 08:46:07,472 INFO L796 eck$LassoCheckResult]: Loop: 5670152#L947-3 assume true; 5670149#L947-1 assume !false; 5670145#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5670142#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5670138#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 5670131#L955 assume 1 != cleanup_~tmp___0~3; 5670129#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5670124#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5670118#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 5670117#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 5670115#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5670114#L1254-22 assume !(0 == isFloorCalling_~floorID); 5670113#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5670112#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 5670023#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5670021#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5670019#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 5670017#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5669950#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5599717#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5599711#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5599713#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5599707#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5599708#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5599693#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5599694#L2875-2 assume !(0 != timeShift_~tmp___9~2); 5674545#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5599644#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5599645#L2318-2 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5599639#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5599640#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 5599635#L2328-2 assume !(~currentFloorID~0 < 0); 5599636#L2343-2 assume !(~currentFloorID~0 < 0); 5670564#L2356-2 assume ~currentFloorID~0 < 1; 5670531#L2358-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5670529#L1254-28 assume !(0 == isFloorCalling_~floorID); 5670530#L1258-28 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5670525#L1281-28 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 5670526#L2362-2 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5670500#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5670501#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5670485#L2694-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5670377#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5670374#L2698-9 assume !(0 != continueInDirection_~tmp~21); 5670364#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5670362#L2710-7 assume { :end_inline_continueInDirection } true; 5670355#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5670352#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5670347#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5670336#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5670321#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5670280#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5670283#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5670271#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 5670155#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 5670152#L947-3 [2018-11-18 08:46:07,472 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:07,472 INFO L82 PathProgramCache]: Analyzing trace with hash -1579453070, now seen corresponding path program 1 times [2018-11-18 08:46:07,472 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:46:07,472 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:46:07,473 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:07,473 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:46:07,473 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:07,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:08,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:46:08,158 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:46:08,159 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 08:46:08,159 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:46:08,159 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:08,159 INFO L82 PathProgramCache]: Analyzing trace with hash 1280881639, now seen corresponding path program 1 times [2018-11-18 08:46:08,159 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:46:08,159 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:46:08,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:08,159 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:46:08,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:08,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 08:46:08,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 08:46:08,646 WARN L180 SmtUtils]: Spent 450.00 ms on a formula simplification. DAG size of input: 206 DAG size of output: 178 [2018-11-18 08:46:09,075 WARN L180 SmtUtils]: Spent 416.00 ms on a formula simplification. DAG size of input: 152 DAG size of output: 141 [2018-11-18 08:46:09,083 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 08:46:09,084 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 08:46:09,084 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 08:46:09,084 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 08:46:09,085 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 08:46:09,085 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,085 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 08:46:09,085 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 08:46:09,085 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration35_Loop [2018-11-18 08:46:09,085 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 08:46:09,085 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 08:46:09,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,123 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,124 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,225 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,624 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 08:46:09,628 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,637 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,637 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,645 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,645 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,679 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,679 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,684 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,684 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret101=0} Honda state: {ULTIMATE.start_timeShift_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,712 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,712 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,724 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,724 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,758 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,758 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,768 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,768 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,791 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,791 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,794 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,794 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,817 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,817 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,820 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:09,820 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~12=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,839 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:09,839 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,859 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 08:46:09,859 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:09,864 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 08:46:09,881 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 08:46:09,881 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 08:46:09,881 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 08:46:09,881 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 08:46:09,881 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 08:46:09,881 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:09,881 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 08:46:09,881 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 08:46:09,881 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration35_Loop [2018-11-18 08:46:09,881 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 08:46:09,882 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 08:46:09,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:09,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,243 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,335 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,391 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,440 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:10,883 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 08:46:10,889 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 08:46:10,891 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,892 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,892 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,893 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,893 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 08:46:10,893 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,896 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 08:46:10,896 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,902 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,902 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,902 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,903 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,903 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,903 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,903 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,903 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,903 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,904 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,904 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,904 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,904 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,905 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,905 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,905 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,905 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,905 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,905 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,906 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,906 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,906 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,906 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,906 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,906 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,907 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,907 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,907 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,908 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,908 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,908 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,908 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,908 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,908 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,908 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,909 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,909 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,909 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,909 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,910 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,910 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,910 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,910 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,910 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,910 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,911 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,913 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,913 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,913 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,913 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,913 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,913 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,914 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,914 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,914 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:10,914 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:10,915 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:10,915 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:10,915 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:10,915 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:10,915 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:10,916 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:10,916 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:10,918 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 08:46:10,921 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2018-11-18 08:46:10,921 INFO L444 ModelExtractionUtils]: 3 out of 6 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 08:46:10,922 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 08:46:10,922 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 08:46:10,923 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 08:46:10,923 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~doorState~0) = 1*~doorState~0 Supporting invariants [] [2018-11-18 08:46:10,924 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 08:46:10,954 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:11,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:11,036 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 08:46:11,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:11,386 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 08:46:11,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:46:11,408 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 2 loop predicates [2018-11-18 08:46:11,409 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 134293 states and 244170 transitions. cyclomatic complexity: 109883 Second operand 4 states. [2018-11-18 08:46:12,038 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 134293 states and 244170 transitions. cyclomatic complexity: 109883. Second operand 4 states. Result 157753 states and 278196 transitions. Complement of second has 5 states. [2018-11-18 08:46:12,039 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 3 states 1 stem states 1 non-accepting loop states 1 accepting loop states [2018-11-18 08:46:12,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 08:46:12,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 2553 transitions. [2018-11-18 08:46:12,045 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 3 states and 2553 transitions. Stem has 65 letters. Loop has 55 letters. [2018-11-18 08:46:12,050 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:12,050 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 3 states and 2553 transitions. Stem has 120 letters. Loop has 55 letters. [2018-11-18 08:46:12,051 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:12,051 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 3 states and 2553 transitions. Stem has 65 letters. Loop has 110 letters. [2018-11-18 08:46:12,054 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:12,054 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 157753 states and 278196 transitions. [2018-11-18 08:46:12,559 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 140322 [2018-11-18 08:46:12,923 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 157753 states to 157371 states and 277702 transitions. [2018-11-18 08:46:12,923 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 145972 [2018-11-18 08:46:13,034 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 146028 [2018-11-18 08:46:13,035 INFO L73 IsDeterministic]: Start isDeterministic. Operand 157371 states and 277702 transitions. [2018-11-18 08:46:13,035 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 08:46:13,035 INFO L705 BuchiCegarLoop]: Abstraction has 157371 states and 277702 transitions. [2018-11-18 08:46:13,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157371 states and 277702 transitions. [2018-11-18 08:46:14,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157371 to 156843. [2018-11-18 08:46:14,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 156843 states. [2018-11-18 08:46:14,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156843 states to 156843 states and 277108 transitions. [2018-11-18 08:46:14,204 INFO L728 BuchiCegarLoop]: Abstraction has 156843 states and 277108 transitions. [2018-11-18 08:46:14,204 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 08:46:14,204 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 08:46:14,204 INFO L87 Difference]: Start difference. First operand 156843 states and 277108 transitions. Second operand 4 states. [2018-11-18 08:46:17,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:46:17,435 INFO L93 Difference]: Finished difference Result 156843 states and 277107 transitions. [2018-11-18 08:46:17,435 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 08:46:17,436 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156843 states and 277107 transitions. [2018-11-18 08:46:17,840 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 140322 [2018-11-18 08:46:18,148 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156843 states to 156843 states and 277107 transitions. [2018-11-18 08:46:18,148 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 145592 [2018-11-18 08:46:18,226 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 145592 [2018-11-18 08:46:18,226 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156843 states and 277107 transitions. [2018-11-18 08:46:18,228 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 08:46:18,229 INFO L705 BuchiCegarLoop]: Abstraction has 156843 states and 277107 transitions. [2018-11-18 08:46:18,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156843 states and 277107 transitions. [2018-11-18 08:46:19,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156843 to 156843. [2018-11-18 08:46:19,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 156843 states. [2018-11-18 08:46:19,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156843 states to 156843 states and 277107 transitions. [2018-11-18 08:46:19,187 INFO L728 BuchiCegarLoop]: Abstraction has 156843 states and 277107 transitions. [2018-11-18 08:46:19,187 INFO L608 BuchiCegarLoop]: Abstraction has 156843 states and 277107 transitions. [2018-11-18 08:46:19,187 INFO L442 BuchiCegarLoop]: ======== Iteration 36============ [2018-11-18 08:46:19,187 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 156843 states and 277107 transitions. [2018-11-18 08:46:19,493 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 140322 [2018-11-18 08:46:19,493 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 08:46:19,493 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 08:46:19,495 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:46:19,495 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 08:46:19,496 INFO L794 eck$LassoCheckResult]: Stem: 6203959#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string107.base,#t~string107.offset := 91];#memory_int := #memory_int[#t~string107.base,1 + #t~string107.offset := 95];#memory_int := #memory_int[#t~string107.base,2 + #t~string107.offset := 93];#memory_int := #memory_int[#t~string107.base,3 + #t~string107.offset := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string109.base,#t~string109.offset := 91];#memory_int := #memory_int[#t~string109.base,1 + #t~string109.offset := 93];#memory_int := #memory_int[#t~string109.base,2 + #t~string109.offset := 32];#memory_int := #memory_int[#t~string109.base,3 + #t~string109.offset := 0];call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string111.base,#t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,1 + #t~string111.offset := 97];#memory_int := #memory_int[#t~string111.base,2 + #t~string111.offset := 116];#memory_int := #memory_int[#t~string111.base,3 + #t~string111.offset := 32];#memory_int := #memory_int[#t~string111.base,4 + #t~string111.offset := 0];call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string113.base,#t~string113.offset := 37];#memory_int := #memory_int[#t~string113.base,1 + #t~string113.offset := 105];#memory_int := #memory_int[#t~string113.base,2 + #t~string113.offset := 0];call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 117];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 112];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 100];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 111];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 119];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 110];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 32];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 73];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 76];#memory_int := #memory_int[#t~string121.base,3 + #t~string121.offset := 95];#memory_int := #memory_int[#t~string121.base,4 + #t~string121.offset := 112];#memory_int := #memory_int[#t~string121.base,5 + #t~string121.offset := 58];#memory_int := #memory_int[#t~string121.base,6 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string123.base,#t~string123.offset := 32];#memory_int := #memory_int[#t~string123.base,1 + #t~string123.offset := 37];#memory_int := #memory_int[#t~string123.base,2 + #t~string123.offset := 105];#memory_int := #memory_int[#t~string123.base,3 + #t~string123.offset := 0];call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 32];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 37];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 105];#memory_int := #memory_int[#t~string125.base,3 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 32];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 37];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 105];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 37];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 105];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 70];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 95];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 112];#memory_int := #memory_int[#t~string133.base,4 + #t~string133.offset := 58];#memory_int := #memory_int[#t~string133.base,5 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string148.base,#t~string148.offset := 32];#memory_int := #memory_int[#t~string148.base,1 + #t~string148.offset := 37];#memory_int := #memory_int[#t~string148.base,2 + #t~string148.offset := 105];#memory_int := #memory_int[#t~string148.base,3 + #t~string148.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 10];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 6203960#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14;assume { :begin_inline_select_helpers } true; 6205037#L1855 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6205038#L1848 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6205285#L1863 main_#t~ret57 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 6205293#L1143 assume 0 != main_~tmp~14;assume { :begin_inline_setup } true; 6205294#L1115 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6205540#L59 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6204843#L250 assume !(0 == getOrigin_~person); 6204477#L254 assume !(1 == getOrigin_~person); 6204412#L258 assume !(2 == getOrigin_~person); 6204413#L262 assume !(3 == getOrigin_~person); 6205081#L266 assume !(4 == getOrigin_~person); 6205012#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6205013#L275 bigMacCall_#t~ret50 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6203232#L1525 assume !(0 == initPersonOnFloor_~floor); 6203233#L1552 assume 1 == initPersonOnFloor_~floor; 6205749#L1553 assume !(0 == initPersonOnFloor_~person); 6205561#L1556 assume !(1 == initPersonOnFloor_~person); 6204062#L1559 assume !(2 == initPersonOnFloor_~person); 6203834#L1562 assume !(3 == initPersonOnFloor_~person); 6203332#L1565 assume !(4 == initPersonOnFloor_~person); 6202889#L1568 assume !(5 == initPersonOnFloor_~person); 6202890#L1633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6204984#L1317 assume !(0 == callOnFloor_~floorID); 6205253#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 6205254#L1329-2 assume { :end_inline_callOnFloor } true; 6205495#L1669 assume { :end_inline_initPersonOnFloor } true; 6205496#L919 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6205973#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6205972#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 6205971#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6204067#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6204068#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 6204367#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 6204969#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 6205965#L2875 assume !(0 != timeShift_~tmp___9~2); 6205543#L2966 assume !(1 == ~doorState~0); 6205530#L2966-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 6203191#L2318 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6203193#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 6206861#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 6206860#L2328 assume !(~currentFloorID~0 < 0); 6206859#L2343 assume !(~currentFloorID~0 < 0); 6206858#L2356 assume ~currentFloorID~0 < 1; 6206857#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6206856#L1254-2 assume !(0 == isFloorCalling_~floorID); 6206855#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6204946#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 6204947#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 6206143#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 6206142#L2974 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 6205960#L2694 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6205961#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 6205862#L2698 assume !(0 != continueInDirection_~tmp~21); 6205863#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6203356#L2710-1 assume { :end_inline_continueInDirection } true; 6203330#L2983-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6210628#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 6210627#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 6210605#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 6215541#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 6209837#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 6209827#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 6209823#L112-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 6209821#L2998 assume { :end_inline_timeShift } true;cleanup_~i~2 := 0; 6209818#L947-3 assume true; 6209819#L947-1 [2018-11-18 08:46:19,496 INFO L796 eck$LassoCheckResult]: Loop: 6209819#L947-1 assume !false; 6323286#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 6323283#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6323280#L1937 cleanup_#t~ret51 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 6323277#L955 assume 1 != cleanup_~tmp___0~3; 6323274#L955-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6323271#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6323268#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 6323265#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 6323262#L2226 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6323259#L1254-22 assume !(0 == isFloorCalling_~floorID); 6323255#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6323250#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 6323235#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6290472#L2286 isIdle_#t~ret67 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6323216#L2299 cleanup_#t~ret52 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 6323213#L967 assume !(0 != cleanup_~tmp~12);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6323209#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6257514#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 6323654#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6323653#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6323647#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 6323645#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 6323644#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 6323643#L2875-2 assume !(0 != timeShift_~tmp___9~2); 6323642#L2966-3 assume !(1 == ~doorState~0); 6323641#L2966-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 6323639#L2318-2 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6323640#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 6324768#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 6324766#L2328-2 assume !(~currentFloorID~0 < 0); 6324765#L2343-2 assume !(~currentFloorID~0 < 0); 6324763#L2356-2 assume ~currentFloorID~0 < 1; 6324762#L2358-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6324761#L1254-28 assume !(0 == isFloorCalling_~floorID); 6324759#L1258-28 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6324757#L1281-28 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 6324662#L2362-2 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 6324656#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 6323418#L2974-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 6323412#L2694-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6323405#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 6323398#L2698-9 assume !(0 != continueInDirection_~tmp~21); 6323391#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6323388#L2710-7 assume { :end_inline_continueInDirection } true; 6323381#L2983-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6323378#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 6323352#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 6323345#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 6323346#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 6323321#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 6323324#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 6323312#L112-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 6323307#L2998-1 assume { :end_inline_timeShift } true;cleanup_~i~2 := 1 + cleanup_~i~2; 6323303#L947-3 assume true; 6209819#L947-1 [2018-11-18 08:46:19,496 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:19,496 INFO L82 PathProgramCache]: Analyzing trace with hash 1289519258, now seen corresponding path program 1 times [2018-11-18 08:46:19,496 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:46:19,496 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:46:19,497 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:19,497 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:46:19,497 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:19,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:20,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:46:20,189 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 08:46:20,189 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 08:46:20,189 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 08:46:20,190 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:20,190 INFO L82 PathProgramCache]: Analyzing trace with hash 1815376041, now seen corresponding path program 1 times [2018-11-18 08:46:20,190 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 08:46:20,190 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 08:46:20,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:20,190 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 08:46:20,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 08:46:20,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 08:46:20,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 08:46:20,760 WARN L180 SmtUtils]: Spent 547.00 ms on a formula simplification. DAG size of input: 205 DAG size of output: 176 [2018-11-18 08:46:21,154 WARN L180 SmtUtils]: Spent 388.00 ms on a formula simplification. DAG size of input: 150 DAG size of output: 139 [2018-11-18 08:46:21,157 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 08:46:21,157 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 08:46:21,157 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 08:46:21,157 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 08:46:21,157 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 08:46:21,158 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,158 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 08:46:21,158 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 08:46:21,158 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration36_Loop [2018-11-18 08:46:21,158 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 08:46:21,158 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 08:46:21,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,448 WARN L180 SmtUtils]: Spent 250.00 ms on a formula simplification that was a NOOP. DAG size: 14 [2018-11-18 08:46:21,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,485 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,486 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,525 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,536 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,537 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,539 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,540 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,541 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,542 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,544 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,545 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,548 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,549 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,550 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,550 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,553 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,554 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,555 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:21,905 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 08:46:21,905 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,917 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:21,918 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:21,921 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:21,921 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,936 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:21,936 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:21,939 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:21,939 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret99=0} Honda state: {ULTIMATE.start_timeShift_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,956 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:21,956 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:21,959 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:21,959 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~20=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,979 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:21,980 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:21,982 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:21,982 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:21,998 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:21,998 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,000 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,000 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,019 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,019 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,022 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,022 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_0~0=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~22=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_0~0=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,044 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,044 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,046 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,046 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,068 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,068 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,080 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,080 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~3=0, ULTIMATE.start_isBlocked_~retValue_acc~13=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~3=0, ULTIMATE.start_isBlocked_~retValue_acc~13=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,096 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,096 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,097 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,098 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,114 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,115 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,116 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,116 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,132 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,132 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,134 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,134 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~2=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,149 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,150 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,152 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,152 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,179 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,179 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,187 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,188 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret95=0} Honda state: {ULTIMATE.start_timeShift_#t~ret95=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,213 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,213 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,215 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,215 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret0=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,230 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,230 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,232 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,232 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,247 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,248 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,251 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,252 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_areDoorsOpen_#res=0, ULTIMATE.start___utac_acc__Specification9_spec__3_~tmp___0~0=0, ~doorState~0=0, ULTIMATE.start_areDoorsOpen_~retValue_acc~15=0} Honda state: {ULTIMATE.start_areDoorsOpen_#res=0, ULTIMATE.start___utac_acc__Specification9_spec__3_~tmp___0~0=0, ~doorState~0=0, ULTIMATE.start_areDoorsOpen_~retValue_acc~15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2018-11-18 08:46:22,276 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,276 INFO L163 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,288 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,288 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,308 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,308 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,312 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,312 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret2=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,337 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,337 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,340 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,340 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret66=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret66=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,359 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,359 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,368 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,368 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ~currentHeading~0=1} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ~currentHeading~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,383 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,383 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,385 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,386 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret71=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,407 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,407 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,409 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,409 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~6=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,425 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,425 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,427 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,427 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isEmpty_#res=0, ULTIMATE.start___utac_acc__Specification9_spec__3_~tmp___1~0=0} Honda state: {ULTIMATE.start_isEmpty_#res=0, ULTIMATE.start___utac_acc__Specification9_spec__3_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,447 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,447 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,451 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,451 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~21=0, ULTIMATE.start_isTopFloor_~retValue_acc~10=0, ULTIMATE.start_isTopFloor_#res=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~21=0, ULTIMATE.start_isTopFloor_~retValue_acc~10=0, ULTIMATE.start_isTopFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,473 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,473 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,474 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,475 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,490 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,490 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,492 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,492 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret69=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret69=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,513 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,513 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,516 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,516 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,531 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,531 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,533 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,533 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret75=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret75=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,554 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,554 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,555 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,555 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret104=0} Honda state: {ULTIMATE.start_timeShift_#t~ret104=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,570 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,570 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,576 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,576 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~4=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,592 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,592 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,594 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,594 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret94=0} Honda state: {ULTIMATE.start_timeShift_#t~ret94=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,615 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,615 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,616 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,616 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,637 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,637 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,639 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,639 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,654 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,654 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,656 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,656 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret67=0} Honda state: {ULTIMATE.start_isIdle_#t~ret67=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,671 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,671 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,673 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,673 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,693 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,693 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,695 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,695 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~12=0} Honda state: {ULTIMATE.start_cleanup_~tmp~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,710 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,710 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,715 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,716 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret98=0} Honda state: {ULTIMATE.start_timeShift_#t~ret98=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,731 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,731 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:22,734 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 08:46:22,734 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,755 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 08:46:22,755 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_25736c24-ce16-49f7-93d9-77eacd8ea2fc/bin-2019/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:22,773 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 08:46:22,773 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 08:46:23,273 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 08:46:23,274 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 08:46:23,274 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 08:46:23,275 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 08:46:23,275 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 08:46:23,275 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 08:46:23,275 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 08:46:23,275 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 08:46:23,275 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 08:46:23,275 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration36_Loop [2018-11-18 08:46:23,275 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 08:46:23,275 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 08:46:23,278 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,319 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,331 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,406 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 08:46:23,720 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 08:46:23,721 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 08:46:23,721 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,721 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,721 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,722 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,722 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,722 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,722 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,722 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,723 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,723 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,723 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,724 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,724 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,724 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,724 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,724 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,724 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,725 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,725 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,725 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,725 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,725 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,725 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,725 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,726 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,726 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,726 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,726 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,726 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,726 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,727 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,727 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,727 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,727 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,727 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,727 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,728 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,728 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,728 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,728 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,728 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,728 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,728 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,729 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,729 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,729 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,729 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,729 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,729 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,729 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,730 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,730 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,730 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,730 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,731 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,731 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,731 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,731 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,731 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,731 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,731 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,731 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,732 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,732 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,732 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,732 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,732 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,732 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,732 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,733 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,733 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,733 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,733 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,733 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,734 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,734 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,734 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,734 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,734 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,734 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,734 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,735 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,735 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,735 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,735 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,735 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,735 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,736 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,736 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,738 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,738 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,738 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,738 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,738 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,738 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,738 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,739 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,739 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,739 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,739 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,740 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,740 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,740 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,740 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,740 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,740 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,740 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,741 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,741 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,741 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,741 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,741 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,741 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,741 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,742 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,742 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,742 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,743 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,743 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,743 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,743 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,743 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,743 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,743 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,744 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,744 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,744 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,744 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,744 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,745 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,745 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,745 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,745 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,745 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,745 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,745 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,746 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,746 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,746 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,746 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,746 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,746 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,746 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,747 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,747 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,747 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,747 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,747 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,747 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,747 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,748 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,748 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,748 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,748 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,748 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,748 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,749 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,749 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,749 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,749 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,749 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,749 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,750 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,750 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,750 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,750 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,750 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,750 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,750 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,750 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,751 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,751 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,751 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,752 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,752 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,752 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,752 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,752 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,752 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,752 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,753 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,753 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,753 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,753 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,753 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,753 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,753 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,754 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,754 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,754 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,754 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,754 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,755 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,755 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,755 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,755 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,755 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,755 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,756 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,756 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,756 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,756 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,756 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,756 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,756 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,756 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,757 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,758 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,758 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,758 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,758 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,758 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,758 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,758 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,758 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,759 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,759 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,759 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,759 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,759 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,759 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,760 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,760 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,760 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,761 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,761 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,761 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,761 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,761 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,761 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,761 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,762 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,762 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,762 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,763 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,763 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,763 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,763 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,763 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,763 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,763 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,764 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,764 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,764 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,764 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,764 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,764 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,765 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,765 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,765 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,765 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,765 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,766 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,766 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,766 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,766 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,766 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,766 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,766 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,766 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,767 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,767 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,767 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,767 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,767 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,768 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,768 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,768 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,768 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,768 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,768 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,769 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,769 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,769 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,769 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,769 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,769 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,769 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,770 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,770 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,770 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,770 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,770 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,770 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,770 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,770 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,771 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,771 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,771 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,771 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,771 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,771 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,772 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,772 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,772 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,772 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,772 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,772 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,773 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,773 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,773 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,773 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,773 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,773 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,773 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,774 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,774 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,774 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,774 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,774 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,774 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,774 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,775 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,775 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,775 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,775 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,775 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,775 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,776 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,776 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,776 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,776 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,776 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,776 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,777 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,777 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,777 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,777 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,777 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,777 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,777 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,777 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,778 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,778 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,778 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,778 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,778 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,778 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,779 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,779 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,779 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,779 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,779 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,780 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,780 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,780 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,780 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,780 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,780 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,780 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,781 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 08:46:23,781 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 08:46:23,781 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 08:46:23,781 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 08:46:23,781 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 08:46:23,781 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 08:46:23,781 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 08:46:23,782 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 08:46:23,782 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 08:46:23,783 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 08:46:23,785 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2018-11-18 08:46:23,785 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 08:46:23,785 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 08:46:23,785 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 08:46:23,785 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 08:46:23,785 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2018-11-18 08:46:23,786 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 08:46:23,818 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 08:46:24,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:24,131 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 08:46:24,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 08:46:24,167 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 08:46:24,190 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 08:46:24,191 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2018-11-18 08:46:24,191 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 156843 states and 277107 transitions. cyclomatic complexity: 120278 Second operand 6 states. [2018-11-18 08:46:25,245 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 156843 states and 277107 transitions. cyclomatic complexity: 120278. Second operand 6 states. Result 308369 states and 544587 transitions. Complement of second has 8 states. [2018-11-18 08:46:25,246 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 08:46:25,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-18 08:46:25,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 4257 transitions. [2018-11-18 08:46:25,248 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 4257 transitions. Stem has 67 letters. Loop has 55 letters. [2018-11-18 08:46:25,248 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:25,248 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 4257 transitions. Stem has 122 letters. Loop has 55 letters. [2018-11-18 08:46:25,249 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:25,249 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 4257 transitions. Stem has 67 letters. Loop has 110 letters. [2018-11-18 08:46:25,249 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 08:46:25,249 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 308369 states and 544587 transitions. [2018-11-18 08:46:26,057 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 08:46:26,057 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 308369 states to 0 states and 0 transitions. [2018-11-18 08:46:26,057 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 08:46:26,057 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 08:46:26,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 08:46:26,057 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:46:26,057 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 08:46:26,057 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 08:46:26,058 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 08:46:26,058 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 08:46:26,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 08:46:26,058 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 08:46:26,058 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 08:46:26,058 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 08:46:26,058 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 08:46:26,058 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 08:46:26,058 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L442 BuchiCegarLoop]: ======== Iteration 37============ [2018-11-18 08:46:26,058 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 08:46:26,058 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 08:46:26,059 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 08:46:26,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 08:46:26 BoogieIcfgContainer [2018-11-18 08:46:26,063 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 08:46:26,063 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 08:46:26,063 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 08:46:26,063 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 08:46:26,063 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:43:35" (3/4) ... [2018-11-18 08:46:26,066 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 08:46:26,066 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 08:46:26,066 INFO L168 Benchmark]: Toolchain (without parser) took 175395.36 ms. Allocated memory was 1.0 GB in the beginning and 6.2 GB in the end (delta: 5.2 GB). Free memory was 951.1 MB in the beginning and 3.6 GB in the end (delta: -2.7 GB). Peak memory consumption was 2.5 GB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,067 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 08:46:26,067 INFO L168 Benchmark]: CACSL2BoogieTranslator took 560.45 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 144.2 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -161.9 MB). Peak memory consumption was 47.6 MB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,068 INFO L168 Benchmark]: Boogie Procedure Inliner took 114.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 23.9 MB). Peak memory consumption was 23.9 MB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,068 INFO L168 Benchmark]: Boogie Preprocessor took 120.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 23.9 MB). Peak memory consumption was 23.9 MB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,068 INFO L168 Benchmark]: RCFGBuilder took 4132.63 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 181.4 MB). Free memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: -174.0 MB). Peak memory consumption was 381.4 MB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,071 INFO L168 Benchmark]: BuchiAutomizer took 170460.34 ms. Allocated memory was 1.4 GB in the beginning and 6.2 GB in the end (delta: 4.9 GB). Free memory was 1.2 GB in the beginning and 3.6 GB in the end (delta: -2.4 GB). Peak memory consumption was 2.5 GB. Max. memory is 11.5 GB. [2018-11-18 08:46:26,071 INFO L168 Benchmark]: Witness Printer took 3.09 ms. Allocated memory is still 6.2 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 08:46:26,073 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 560.45 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 144.2 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -161.9 MB). Peak memory consumption was 47.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 114.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 23.9 MB). Peak memory consumption was 23.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 120.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 23.9 MB). Peak memory consumption was 23.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 4132.63 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 181.4 MB). Free memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: -174.0 MB). Peak memory consumption was 381.4 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 170460.34 ms. Allocated memory was 1.4 GB in the beginning and 6.2 GB in the end (delta: 4.9 GB). Free memory was 1.2 GB in the beginning and 3.6 GB in the end (delta: -2.4 GB). Peak memory consumption was 2.5 GB. Max. memory is 11.5 GB. * Witness Printer took 3.09 ms. Allocated memory is still 6.2 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 38 terminating modules (36 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function doorState and consists of 3 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 36 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 170.4s and 37 iterations. TraceHistogramMax:1. Analysis of lassos took 32.6s. Construction of modules took 53.4s. Büchi inclusion checks took 19.4s. Highest rank in rank-based complementation 3. Minimization of det autom 36. Minimization of nondet autom 2. Automata minimization 29.8s AutomataMinimizationTime, 36 MinimizatonAttempts, 1352856 StatesRemovedByMinimization, 28 NontrivialMinimizations. Non-live state removal took 21.3s Buchi closure took 7.4s. Biggest automaton had 156843 states and ocurred in iteration 35. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 235931 SDtfs, 502932 SDslu, 384555 SDs, 0 SdLazy, 20465 SolverSat, 2306 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 53.4s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI34 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital206 mio100 ax100 hnf99 lsp15 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq198 hnf88 smp100 dnf105 smp100 tf103 neg98 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 11ms VariablesStem: 0 VariablesLoop: 5 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 44 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.8s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...