./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0cd3be1d Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 08186622cd76fd4d6a6b5312f0089e39f8e95b17 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis No suitable file found in config dir /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/config using search string *Termination*32bit*_Bitvector*.epf No suitable settings file found using Termination*32bit*_Bitvector ERROR: UNSUPPORTED PROPERTY Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: OutOfMemoryError: Java heap space --- Real Ultimate output --- This is Ultimate 0.1.23-0cd3be1 [2018-11-28 12:52:27,728 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-28 12:52:27,729 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-28 12:52:27,736 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-28 12:52:27,737 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-28 12:52:27,737 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-28 12:52:27,738 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-28 12:52:27,739 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-28 12:52:27,740 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-28 12:52:27,741 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-28 12:52:27,741 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-28 12:52:27,742 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-28 12:52:27,742 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-28 12:52:27,743 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-28 12:52:27,744 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-28 12:52:27,744 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-28 12:52:27,745 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-28 12:52:27,746 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-28 12:52:27,747 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-28 12:52:27,749 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-28 12:52:27,749 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-28 12:52:27,750 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-28 12:52:27,752 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-28 12:52:27,752 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-28 12:52:27,752 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-28 12:52:27,752 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-28 12:52:27,753 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-28 12:52:27,754 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-28 12:52:27,754 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-28 12:52:27,755 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-28 12:52:27,755 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-28 12:52:27,756 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-28 12:52:27,756 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-28 12:52:27,756 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-28 12:52:27,756 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-28 12:52:27,757 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-28 12:52:27,757 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-28 12:52:27,767 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-28 12:52:27,767 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-28 12:52:27,768 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-28 12:52:27,768 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-28 12:52:27,769 INFO L133 SettingsManager]: * Use SBE=true [2018-11-28 12:52:27,769 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-28 12:52:27,769 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-28 12:52:27,769 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-28 12:52:27,769 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-28 12:52:27,769 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-28 12:52:27,770 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-28 12:52:27,770 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-28 12:52:27,771 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-28 12:52:27,771 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-28 12:52:27,772 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-28 12:52:27,772 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-28 12:52:27,772 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-28 12:52:27,772 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-28 12:52:27,772 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-28 12:52:27,773 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 08186622cd76fd4d6a6b5312f0089e39f8e95b17 [2018-11-28 12:52:27,798 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-28 12:52:27,805 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-28 12:52:27,807 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-28 12:52:27,808 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-28 12:52:27,808 INFO L276 PluginConnector]: CDTParser initialized [2018-11-28 12:52:27,809 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-28 12:52:27,847 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/data/e5bcf2dab/4b3dfd699d26496cb91ce332ee4dc628/FLAGbb9acced4 [2018-11-28 12:52:28,300 INFO L307 CDTParser]: Found 1 translation units. [2018-11-28 12:52:28,300 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/sv-benchmarks/c/product-lines/elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-28 12:52:28,316 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/data/e5bcf2dab/4b3dfd699d26496cb91ce332ee4dc628/FLAGbb9acced4 [2018-11-28 12:52:28,637 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/data/e5bcf2dab/4b3dfd699d26496cb91ce332ee4dc628 [2018-11-28 12:52:28,640 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-28 12:52:28,641 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-28 12:52:28,641 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-28 12:52:28,642 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-28 12:52:28,645 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-28 12:52:28,646 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:52:28" (1/1) ... [2018-11-28 12:52:28,649 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5143111f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:28, skipping insertion in model container [2018-11-28 12:52:28,649 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:52:28" (1/1) ... [2018-11-28 12:52:28,654 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-28 12:52:28,698 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-28 12:52:29,130 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 12:52:29,145 INFO L191 MainTranslator]: Completed pre-run [2018-11-28 12:52:29,245 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 12:52:29,288 INFO L195 MainTranslator]: Completed translation [2018-11-28 12:52:29,288 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29 WrapperNode [2018-11-28 12:52:29,288 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-28 12:52:29,289 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-28 12:52:29,289 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-28 12:52:29,289 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-28 12:52:29,298 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,324 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,440 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-28 12:52:29,440 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-28 12:52:29,440 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-28 12:52:29,440 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-28 12:52:29,450 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,450 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,467 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,467 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,509 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,539 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,550 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... [2018-11-28 12:52:29,567 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-28 12:52:29,567 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-28 12:52:29,568 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-28 12:52:29,568 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-28 12:52:29,568 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:29,620 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-28 12:52:29,620 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-28 12:52:29,621 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-28 12:52:29,621 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-28 12:52:33,098 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-28 12:52:33,098 INFO L280 CfgBuilder]: Removed 589 assue(true) statements. [2018-11-28 12:52:33,099 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:52:33 BoogieIcfgContainer [2018-11-28 12:52:33,099 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-28 12:52:33,099 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-28 12:52:33,099 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-28 12:52:33,101 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-28 12:52:33,102 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:52:33,103 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 12:52:28" (1/3) ... [2018-11-28 12:52:33,103 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2dfaf9f4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 12:52:33, skipping insertion in model container [2018-11-28 12:52:33,103 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:52:33,104 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:52:29" (2/3) ... [2018-11-28 12:52:33,104 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2dfaf9f4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 12:52:33, skipping insertion in model container [2018-11-28 12:52:33,104 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:52:33,104 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:52:33" (3/3) ... [2018-11-28 12:52:33,105 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product25_true-unreach-call_true-termination.cil.c [2018-11-28 12:52:33,144 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-28 12:52:33,145 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-28 12:52:33,145 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-28 12:52:33,145 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-28 12:52:33,145 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-28 12:52:33,145 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-28 12:52:33,145 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-28 12:52:33,145 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-28 12:52:33,146 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-28 12:52:33,182 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2507 states. [2018-11-28 12:52:33,242 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1243 [2018-11-28 12:52:33,242 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:33,242 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:33,252 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,252 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,252 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-28 12:52:33,252 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2507 states. [2018-11-28 12:52:33,267 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1243 [2018-11-28 12:52:33,267 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:33,267 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:33,269 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,269 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,274 INFO L794 eck$LassoCheckResult]: Stem: 534#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1625#L-1true havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1463#L1855true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2234#L1863true main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1653#L1143true assume 0 != main_~tmp~14; 2190#L1115true ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1952#L59true havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1288#L250true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2317#L275true bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 116#L1525true assume 0 == initPersonOnFloor_~floor; 1227#L1526true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1431#L1633-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1794#L1317true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2480#L1329-2true havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 435#L1254true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1404#L1281true stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1927#L2727true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2453#L2739true timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2117#L2875true assume !(0 != timeShift_~tmp___9~2); 1954#L2966true assume !(1 == ~doorState~0); 1943#L2966-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 100#L2318true assume !(1 == stopRequestedInDirection_~dir); 438#L2487true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1857#L2640true timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 173#L2974true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2502#L2694true assume !(1 == ~currentHeading~0); 618#L2704true assume !(0 == ~currentFloorID~0); 613#L2704-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 158#L2710-5true havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1680#L2114true __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2037#L2174-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1376#L2206-6true __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2181#L102true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 379#L112-1true cleanup_~i~2 := 0; 511#L947-2true [2018-11-28 12:52:33,275 INFO L796 eck$LassoCheckResult]: Loop: 511#L947-2true assume !false; 172#L948true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 18#L951true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1750#L1937true cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1284#L955true assume 1 != cleanup_~tmp___0~3; 1287#L955-1true havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 560#L1254-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1358#L1281-21true anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 456#L2222true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1764#L2286true isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2287#L2299true cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1650#L967true assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 550#L1254-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1478#L1281-26true stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1930#L2727-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2454#L2739-1true timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2120#L2875-1true assume !(0 != timeShift_~tmp___9~2); 1942#L2966-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1947#L2966-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 106#L2318-2true assume !(1 == stopRequestedInDirection_~dir); 442#L2487-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1839#L2640-2true timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 177#L2974-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2483#L2694-3true assume !(1 == ~currentHeading~0); 606#L2704-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 612#L2704-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 149#L2710-11true havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1686#L2114-1true __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2026#L2174-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1368#L2206-13true __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2194#L102-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 412#L112-3true cleanup_~i~2 := 1 + cleanup_~i~2; 511#L947-2true [2018-11-28 12:52:33,280 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:33,280 INFO L82 PathProgramCache]: Analyzing trace with hash -379134640, now seen corresponding path program 1 times [2018-11-28 12:52:33,282 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:33,282 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:33,321 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,321 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:33,321 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:33,479 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:33,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:33,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:33,485 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:33,485 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:33,485 INFO L82 PathProgramCache]: Analyzing trace with hash -547538820, now seen corresponding path program 1 times [2018-11-28 12:52:33,485 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:33,485 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:33,486 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,486 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:33,486 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:33,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:33,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:33,528 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:33,529 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:33,539 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:52:33,539 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:52:33,540 INFO L87 Difference]: Start difference. First operand 2507 states. Second operand 4 states. [2018-11-28 12:52:33,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:33,697 INFO L93 Difference]: Finished difference Result 4384 states and 8273 transitions. [2018-11-28 12:52:33,700 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:52:33,702 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4384 states and 8273 transitions. [2018-11-28 12:52:33,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2199 [2018-11-28 12:52:33,746 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4384 states to 4356 states and 8240 transitions. [2018-11-28 12:52:33,747 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4356 [2018-11-28 12:52:33,751 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4356 [2018-11-28 12:52:33,752 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4356 states and 8240 transitions. [2018-11-28 12:52:33,760 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:33,761 INFO L705 BuchiCegarLoop]: Abstraction has 4356 states and 8240 transitions. [2018-11-28 12:52:33,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4356 states and 8240 transitions. [2018-11-28 12:52:33,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4356 to 2497. [2018-11-28 12:52:33,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2497 states. [2018-11-28 12:52:33,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2497 states to 2497 states and 4718 transitions. [2018-11-28 12:52:33,828 INFO L728 BuchiCegarLoop]: Abstraction has 2497 states and 4718 transitions. [2018-11-28 12:52:33,828 INFO L608 BuchiCegarLoop]: Abstraction has 2497 states and 4718 transitions. [2018-11-28 12:52:33,828 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-28 12:52:33,828 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2497 states and 4718 transitions. [2018-11-28 12:52:33,837 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1245 [2018-11-28 12:52:33,837 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:33,837 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:33,839 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,839 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:33,839 INFO L794 eck$LassoCheckResult]: Stem: 7833#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 7834#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 8762#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 8763#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 8970#L1143 assume 0 != main_~tmp~14; 8971#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 9122#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 8592#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 8238#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7224#L1525 assume 0 == initPersonOnFloor_~floor; 7225#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6912#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8721#L1317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8770#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7734#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7605#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 8673#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 7913#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7554#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 8203#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 8704#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9401#L2875 assume !(0 != timeShift_~tmp___9~2); 9124#L2966 assume !(1 == ~doorState~0); 9116#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 7185#L2318 assume !(1 == stopRequestedInDirection_~dir); 7186#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 7015#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 7327#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 7328#L2694 assume !(1 == ~currentHeading~0); 7912#L2704 assume !(0 == ~currentFloorID~0); 7907#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7236#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7306#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9004#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 7699#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 8634#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6958#L112-1 cleanup_~i~2 := 0; 7668#L947-2 [2018-11-28 12:52:33,840 INFO L796 eck$LassoCheckResult]: Loop: 7668#L947-2 assume !false; 7326#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 6949#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6950#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 8590#L955 assume 1 != cleanup_~tmp___0~3; 8591#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7855#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7134#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 7754#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7702#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 9073#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 8969#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7848#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7087#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 8775#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 7915#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7577#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 8202#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 8709#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9400#L2875-1 assume !(0 != timeShift_~tmp___9~2); 9114#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9115#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 7200#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 7201#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 7030#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 7336#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 7337#L2694-3 assume !(1 == ~currentHeading~0); 7900#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7901#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7230#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7292#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9010#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 7631#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 8626#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6944#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 7668#L947-2 [2018-11-28 12:52:33,840 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:33,840 INFO L82 PathProgramCache]: Analyzing trace with hash 1436377000, now seen corresponding path program 1 times [2018-11-28 12:52:33,840 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:33,840 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:33,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,841 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:33,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:33,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:33,883 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:33,883 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:33,884 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:33,884 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:33,884 INFO L82 PathProgramCache]: Analyzing trace with hash -336710729, now seen corresponding path program 1 times [2018-11-28 12:52:33,884 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:33,884 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:33,885 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,885 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:33,885 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:33,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:33,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:33,939 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:33,939 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 12:52:33,939 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:33,940 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 12:52:33,940 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 12:52:33,940 INFO L87 Difference]: Start difference. First operand 2497 states and 4718 transitions. cyclomatic complexity: 2222 Second operand 7 states. [2018-11-28 12:52:35,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:35,587 INFO L93 Difference]: Finished difference Result 23670 states and 44658 transitions. [2018-11-28 12:52:35,587 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-28 12:52:35,588 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23670 states and 44658 transitions. [2018-11-28 12:52:35,688 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15681 [2018-11-28 12:52:35,784 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23670 states to 23670 states and 44658 transitions. [2018-11-28 12:52:35,785 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23670 [2018-11-28 12:52:35,811 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23670 [2018-11-28 12:52:35,811 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23670 states and 44658 transitions. [2018-11-28 12:52:35,837 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:35,838 INFO L705 BuchiCegarLoop]: Abstraction has 23670 states and 44658 transitions. [2018-11-28 12:52:35,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23670 states and 44658 transitions. [2018-11-28 12:52:36,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23670 to 4947. [2018-11-28 12:52:36,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4947 states. [2018-11-28 12:52:36,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4947 states to 4947 states and 9344 transitions. [2018-11-28 12:52:36,015 INFO L728 BuchiCegarLoop]: Abstraction has 4947 states and 9344 transitions. [2018-11-28 12:52:36,015 INFO L608 BuchiCegarLoop]: Abstraction has 4947 states and 9344 transitions. [2018-11-28 12:52:36,015 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-28 12:52:36,016 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4947 states and 9344 transitions. [2018-11-28 12:52:36,031 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2496 [2018-11-28 12:52:36,031 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:36,031 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:36,033 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:36,033 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:36,034 INFO L794 eck$LassoCheckResult]: Stem: 34076#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 34077#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 35064#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 35065#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 35288#L1143 assume 0 != main_~tmp~14; 35289#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35470#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 34869#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 34503#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 33438#L1525 assume 0 == initPersonOnFloor_~floor; 33439#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 33126#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 35016#L1317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 35421#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 33963#L1254 assume !(0 == isFloorCalling_~floorID); 33965#L1258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 35953#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 35952#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 35949#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 35946#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 35945#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 35944#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 35942#L2875 assume !(0 != timeShift_~tmp___9~2); 35941#L2966 assume !(1 == ~doorState~0); 35940#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 35938#L2318 assume !(1 == stopRequestedInDirection_~dir); 35934#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 35922#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 35921#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 35920#L2694 assume !(1 == ~currentHeading~0); 34171#L2704 assume !(0 == ~currentFloorID~0); 34172#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35884#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 35883#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 35882#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 35876#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 35872#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35862#L112-1 cleanup_~i~2 := 0; 35860#L947-2 [2018-11-28 12:52:36,034 INFO L796 eck$LassoCheckResult]: Loop: 35860#L947-2 assume !false; 35859#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 35858#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 35857#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 35856#L955 assume 1 != cleanup_~tmp___0~3; 35815#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 34104#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 34105#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 33990#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 33991#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 35817#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 35816#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 34093#L1254-26 assume !(0 == isFloorCalling_~floorID); 34095#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 37062#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 37061#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 37058#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 37055#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 37054#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 37053#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 37051#L2875-1 assume !(0 != timeShift_~tmp___9~2); 37050#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 37049#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 37047#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 33973#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 33244#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 33553#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 33554#L2694-3 assume !(1 == ~currentHeading~0); 34156#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 34157#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 36979#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 36978#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 36977#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 36971#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 36967#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35861#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 35860#L947-2 [2018-11-28 12:52:36,034 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:36,034 INFO L82 PathProgramCache]: Analyzing trace with hash 814072118, now seen corresponding path program 1 times [2018-11-28 12:52:36,034 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:36,034 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:36,035 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:36,035 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:36,036 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:36,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:36,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:36,105 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:36,105 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:36,105 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:36,105 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:36,106 INFO L82 PathProgramCache]: Analyzing trace with hash 846779682, now seen corresponding path program 1 times [2018-11-28 12:52:36,106 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:36,106 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:36,106 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:36,107 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:36,107 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:36,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:36,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:36,145 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:36,145 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:52:36,145 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:36,145 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:52:36,146 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:52:36,146 INFO L87 Difference]: Start difference. First operand 4947 states and 9344 transitions. cyclomatic complexity: 4398 Second operand 5 states. [2018-11-28 12:52:37,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:37,891 INFO L93 Difference]: Finished difference Result 17508 states and 33019 transitions. [2018-11-28 12:52:37,891 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:52:37,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17508 states and 33019 transitions. [2018-11-28 12:52:37,957 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9403 [2018-11-28 12:52:38,013 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17508 states to 17508 states and 33019 transitions. [2018-11-28 12:52:38,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17508 [2018-11-28 12:52:38,027 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17508 [2018-11-28 12:52:38,028 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17508 states and 33019 transitions. [2018-11-28 12:52:38,047 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:38,047 INFO L705 BuchiCegarLoop]: Abstraction has 17508 states and 33019 transitions. [2018-11-28 12:52:38,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17508 states and 33019 transitions. [2018-11-28 12:52:38,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17508 to 8949. [2018-11-28 12:52:38,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8949 states. [2018-11-28 12:52:38,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8949 states to 8949 states and 16883 transitions. [2018-11-28 12:52:38,187 INFO L728 BuchiCegarLoop]: Abstraction has 8949 states and 16883 transitions. [2018-11-28 12:52:38,187 INFO L608 BuchiCegarLoop]: Abstraction has 8949 states and 16883 transitions. [2018-11-28 12:52:38,187 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-28 12:52:38,187 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8949 states and 16883 transitions. [2018-11-28 12:52:38,214 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4549 [2018-11-28 12:52:38,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:38,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:38,217 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:38,217 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:38,217 INFO L794 eck$LassoCheckResult]: Stem: 56552#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 56553#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 57529#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 57530#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 57750#L1143 assume 0 != main_~tmp~14; 57751#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 57918#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 57350#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 56981#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55914#L1525 assume 0 == initPersonOnFloor_~floor; 55915#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 55602#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 57486#L1317 assume !(0 == callOnFloor_~floorID); 57723#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 57540#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 58237#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 58252#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 58307#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 58306#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 56247#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 56941#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 57469#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 64343#L2875 assume !(0 != timeShift_~tmp___9~2); 57920#L2966 assume !(1 == ~doorState~0); 57912#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 55875#L2318 assume !(1 == stopRequestedInDirection_~dir); 55876#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 57896#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 56019#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 56020#L2694 assume !(1 == ~currentHeading~0); 64513#L2704 assume !(0 == ~currentFloorID~0); 56643#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58357#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 58355#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 58354#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 58342#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 58337#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 58314#L112-1 cleanup_~i~2 := 0; 58312#L947-2 [2018-11-28 12:52:38,218 INFO L796 eck$LassoCheckResult]: Loop: 58312#L947-2 assume !false; 58311#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 58310#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 58309#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 58308#L955 assume 1 != cleanup_~tmp___0~3; 58305#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 58304#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 58287#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 58277#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 58266#L2226 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 58261#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 58260#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 58259#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 58257#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 58256#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 58255#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 58254#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 56270#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 56940#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 57474#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 64340#L2875-1 assume !(0 != timeShift_~tmp___9~2); 57910#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 57911#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 55890#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 55891#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 64431#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 64430#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 58238#L2694-3 assume !(1 == ~currentHeading~0); 58239#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 56627#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58358#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 58356#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 58348#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 58341#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 58324#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 58313#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 58312#L947-2 [2018-11-28 12:52:38,219 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:38,219 INFO L82 PathProgramCache]: Analyzing trace with hash 2031222974, now seen corresponding path program 1 times [2018-11-28 12:52:38,219 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:38,219 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:38,220 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:38,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:38,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:38,276 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:38,276 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:38,276 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:38,276 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:38,276 INFO L82 PathProgramCache]: Analyzing trace with hash 341115237, now seen corresponding path program 1 times [2018-11-28 12:52:38,276 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:38,276 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:38,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:38,277 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:38,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:38,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:38,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:38,318 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:38,318 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:52:38,318 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:38,318 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:52:38,319 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:52:38,319 INFO L87 Difference]: Start difference. First operand 8949 states and 16883 transitions. cyclomatic complexity: 7935 Second operand 5 states. [2018-11-28 12:52:38,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:38,671 INFO L93 Difference]: Finished difference Result 35782 states and 67576 transitions. [2018-11-28 12:52:38,672 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:52:38,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35782 states and 67576 transitions. [2018-11-28 12:52:38,865 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24062 [2018-11-28 12:52:38,944 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35782 states to 35782 states and 67576 transitions. [2018-11-28 12:52:38,944 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35782 [2018-11-28 12:52:38,961 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35782 [2018-11-28 12:52:38,961 INFO L73 IsDeterministic]: Start isDeterministic. Operand 35782 states and 67576 transitions. [2018-11-28 12:52:38,977 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:38,977 INFO L705 BuchiCegarLoop]: Abstraction has 35782 states and 67576 transitions. [2018-11-28 12:52:38,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35782 states and 67576 transitions. [2018-11-28 12:52:39,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35782 to 16126. [2018-11-28 12:52:39,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16126 states. [2018-11-28 12:52:39,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16126 states to 16126 states and 30437 transitions. [2018-11-28 12:52:39,147 INFO L728 BuchiCegarLoop]: Abstraction has 16126 states and 30437 transitions. [2018-11-28 12:52:39,147 INFO L608 BuchiCegarLoop]: Abstraction has 16126 states and 30437 transitions. [2018-11-28 12:52:39,147 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-28 12:52:39,147 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16126 states and 30437 transitions. [2018-11-28 12:52:39,177 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8972 [2018-11-28 12:52:39,177 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:39,177 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:39,180 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:39,180 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:39,180 INFO L794 eck$LassoCheckResult]: Stem: 101298#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 101299#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 102297#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 102298#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 102524#L1143 assume 0 != main_~tmp~14; 102525#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 102716#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 102102#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 101725#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 100667#L1525 assume 0 == initPersonOnFloor_~floor; 100668#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 100354#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 102248#L1317 assume !(0 == callOnFloor_~floorID); 102492#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 102309#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 103070#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 103079#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 103084#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 103081#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 103082#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 103749#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 103747#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 103744#L2875 assume !(0 != timeShift_~tmp___9~2); 103731#L2966 assume !(1 == ~doorState~0); 103729#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 103711#L2318 assume !(1 == stopRequestedInDirection_~dir); 103687#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 103673#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 103671#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 103672#L2694 assume !(1 == ~currentHeading~0); 103881#L2704 assume !(0 == ~currentFloorID~0); 103874#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103867#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 103866#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 103865#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 103859#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 103855#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 103845#L112-1 cleanup_~i~2 := 0; 103842#L947-2 [2018-11-28 12:52:39,181 INFO L796 eck$LassoCheckResult]: Loop: 103842#L947-2 assume !false; 103840#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 103838#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 103836#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 103834#L955 assume 1 != cleanup_~tmp___0~3; 103823#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 103815#L1254-21 assume !(0 == isFloorCalling_~floorID); 103816#L1258-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 103822#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 103611#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 103597#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 103594#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 103577#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 103575#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 103574#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 103495#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 103492#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 103489#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 103487#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 103486#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 103484#L2875-1 assume !(0 != timeShift_~tmp___9~2); 103438#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 103435#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 103433#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 103398#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 103393#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 103389#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 103390#L2694-3 assume !(1 == ~currentHeading~0); 103776#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 107053#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 107047#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 107046#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 107045#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 107039#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 107035#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 103844#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 103842#L947-2 [2018-11-28 12:52:39,181 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:39,182 INFO L82 PathProgramCache]: Analyzing trace with hash 2031222974, now seen corresponding path program 2 times [2018-11-28 12:52:39,182 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:39,182 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:39,182 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,183 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:39,183 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:39,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:39,228 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:39,228 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:39,229 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:39,229 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:39,229 INFO L82 PathProgramCache]: Analyzing trace with hash 840297072, now seen corresponding path program 1 times [2018-11-28 12:52:39,229 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:39,229 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:39,230 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,230 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:39,230 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:39,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:39,260 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:39,261 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:39,261 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:39,261 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:52:39,261 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:52:39,261 INFO L87 Difference]: Start difference. First operand 16126 states and 30437 transitions. cyclomatic complexity: 14312 Second operand 3 states. [2018-11-28 12:52:39,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:39,626 INFO L93 Difference]: Finished difference Result 17741 states and 33172 transitions. [2018-11-28 12:52:39,626 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:52:39,627 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17741 states and 33172 transitions. [2018-11-28 12:52:39,675 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9922 [2018-11-28 12:52:39,713 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17741 states to 17741 states and 33172 transitions. [2018-11-28 12:52:39,713 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17741 [2018-11-28 12:52:39,723 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17741 [2018-11-28 12:52:39,724 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17741 states and 33172 transitions. [2018-11-28 12:52:39,734 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:39,734 INFO L705 BuchiCegarLoop]: Abstraction has 17741 states and 33172 transitions. [2018-11-28 12:52:39,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17741 states and 33172 transitions. [2018-11-28 12:52:39,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17741 to 16126. [2018-11-28 12:52:39,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16126 states. [2018-11-28 12:52:39,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16126 states to 16126 states and 30293 transitions. [2018-11-28 12:52:39,868 INFO L728 BuchiCegarLoop]: Abstraction has 16126 states and 30293 transitions. [2018-11-28 12:52:39,868 INFO L608 BuchiCegarLoop]: Abstraction has 16126 states and 30293 transitions. [2018-11-28 12:52:39,869 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-28 12:52:39,869 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16126 states and 30293 transitions. [2018-11-28 12:52:39,902 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8972 [2018-11-28 12:52:39,902 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:39,902 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:39,905 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:39,906 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:39,906 INFO L794 eck$LassoCheckResult]: Stem: 135179#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 135180#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 136162#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 136163#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 136379#L1143 assume 0 != main_~tmp~14; 136380#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 136555#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 135982#L250 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 135608#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 134537#L1525 assume 0 == initPersonOnFloor_~floor; 134538#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 134228#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 136119#L1317 assume !(0 == callOnFloor_~floorID); 136350#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 136172#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 136887#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 136894#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 136896#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 136895#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 134873#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 135565#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 136102#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 136897#L2875 assume !(0 != timeShift_~tmp___9~2); 136898#L2966 assume !(1 == ~doorState~0); 149715#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 149714#L2318 assume !(1 == stopRequestedInDirection_~dir); 149713#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 134329#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 149700#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 149698#L2694 assume !(1 == ~currentHeading~0); 149693#L2704 assume !(0 == ~currentFloorID~0); 149691#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134618#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 134619#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 136416#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 135025#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 136940#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 136917#L112-1 cleanup_~i~2 := 0; 136915#L947-2 [2018-11-28 12:52:39,906 INFO L796 eck$LassoCheckResult]: Loop: 136915#L947-2 assume !false; 136914#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 136913#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 136912#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 136910#L955 assume 1 != cleanup_~tmp___0~3; 136911#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 136903#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 136904#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 149513#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 149188#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 149189#L1254-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 150289#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 135848#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 135028#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 136490#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 136808#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 137039#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 137038#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 137037#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 137034#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 137031#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 137029#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 137028#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 137026#L2875-1 assume !(0 != timeShift_~tmp___9~2); 137025#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 137024#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 137022#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 137007#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 137002#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 137000#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 136983#L2694-3 assume !(1 == ~currentHeading~0); 136968#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 136958#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 136952#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 136951#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 136950#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 136944#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 136927#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 136916#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 136915#L947-2 [2018-11-28 12:52:39,911 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:39,911 INFO L82 PathProgramCache]: Analyzing trace with hash 2031222974, now seen corresponding path program 3 times [2018-11-28 12:52:39,911 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:39,911 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:39,912 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,912 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:39,912 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:39,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:39,959 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:39,959 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:39,960 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:39,960 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:39,960 INFO L82 PathProgramCache]: Analyzing trace with hash 1109965791, now seen corresponding path program 1 times [2018-11-28 12:52:39,960 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:39,960 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:39,961 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,961 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:39,961 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:39,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:39,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:39,984 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:39,984 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:39,984 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:39,984 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:52:39,984 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:52:39,984 INFO L87 Difference]: Start difference. First operand 16126 states and 30293 transitions. cyclomatic complexity: 14168 Second operand 3 states. [2018-11-28 12:52:40,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:40,037 INFO L93 Difference]: Finished difference Result 16126 states and 30287 transitions. [2018-11-28 12:52:40,039 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:52:40,039 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16126 states and 30287 transitions. [2018-11-28 12:52:40,229 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8972 [2018-11-28 12:52:40,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16126 states to 16126 states and 30287 transitions. [2018-11-28 12:52:40,257 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16126 [2018-11-28 12:52:40,265 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16126 [2018-11-28 12:52:40,266 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16126 states and 30287 transitions. [2018-11-28 12:52:40,274 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:40,274 INFO L705 BuchiCegarLoop]: Abstraction has 16126 states and 30287 transitions. [2018-11-28 12:52:40,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16126 states and 30287 transitions. [2018-11-28 12:52:40,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16126 to 16126. [2018-11-28 12:52:40,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16126 states. [2018-11-28 12:52:40,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16126 states to 16126 states and 30287 transitions. [2018-11-28 12:52:40,393 INFO L728 BuchiCegarLoop]: Abstraction has 16126 states and 30287 transitions. [2018-11-28 12:52:40,393 INFO L608 BuchiCegarLoop]: Abstraction has 16126 states and 30287 transitions. [2018-11-28 12:52:40,393 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-28 12:52:40,393 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16126 states and 30287 transitions. [2018-11-28 12:52:40,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8972 [2018-11-28 12:52:40,425 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:40,425 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:40,429 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:40,429 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:40,429 INFO L794 eck$LassoCheckResult]: Stem: 167425#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 167426#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 168400#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 168401#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 168620#L1143 assume 0 != main_~tmp~14; 168621#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 168789#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 168225#L250 assume !(0 == getOrigin_~person); 167907#L254 assume !(1 == getOrigin_~person); 167846#L258 assume !(2 == getOrigin_~person); 167847#L262 assume !(3 == getOrigin_~person); 168427#L266 assume !(4 == getOrigin_~person); 168384#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 168385#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 166793#L1525 assume 0 == initPersonOnFloor_~floor; 166794#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 166487#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 168358#L1317 assume !(0 == callOnFloor_~floorID); 168591#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 168408#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 169104#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 169106#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 169110#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 169107#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 169108#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 175805#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 175799#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 175797#L2875 assume !(0 != timeShift_~tmp___9~2); 168791#L2966 assume !(1 == ~doorState~0); 168792#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 182084#L2318 assume !(1 == stopRequestedInDirection_~dir); 182082#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 182083#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 182466#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 182467#L2694 assume !(1 == ~currentHeading~0); 182539#L2704 assume !(0 == ~currentFloorID~0); 167512#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 167508#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 180420#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 180419#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 180413#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 180405#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 180394#L112-1 cleanup_~i~2 := 0; 180392#L947-2 [2018-11-28 12:52:40,429 INFO L796 eck$LassoCheckResult]: Loop: 180392#L947-2 assume !false; 180391#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 180390#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 180389#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 180388#L955 assume 1 != cleanup_~tmp___0~3; 180387#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 180385#L1254-21 assume !(0 == isFloorCalling_~floorID); 180386#L1258-21 assume !(1 == isFloorCalling_~floorID); 180671#L1262-21 assume !(2 == isFloorCalling_~floorID); 180669#L1266-21 assume !(3 == isFloorCalling_~floorID); 180668#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 180667#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 169191#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 169192#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 182050#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 182049#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 182047#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 182048#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 182276#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 182273#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 182270#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 182268#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 182267#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 182266#L2875-1 assume !(0 != timeShift_~tmp___9~2); 182265#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 182264#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 182263#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 182210#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 182205#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 182203#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 182204#L2694-3 assume !(1 == ~currentHeading~0); 182605#L2704-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 167505#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 167496#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 180523#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 180522#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 180516#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 180512#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 180393#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 180392#L947-2 [2018-11-28 12:52:40,430 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:40,430 INFO L82 PathProgramCache]: Analyzing trace with hash -642611512, now seen corresponding path program 1 times [2018-11-28 12:52:40,430 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:40,430 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:40,431 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:40,431 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:40,431 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:40,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:40,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:40,510 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:40,510 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:40,510 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:40,511 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:40,511 INFO L82 PathProgramCache]: Analyzing trace with hash 1092314115, now seen corresponding path program 1 times [2018-11-28 12:52:40,511 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:40,511 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:40,512 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:40,512 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:40,512 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:40,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:40,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:40,541 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:40,541 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:40,541 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:40,541 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:52:40,541 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:52:40,542 INFO L87 Difference]: Start difference. First operand 16126 states and 30287 transitions. cyclomatic complexity: 14162 Second operand 4 states. [2018-11-28 12:52:40,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:40,721 INFO L93 Difference]: Finished difference Result 24590 states and 45984 transitions. [2018-11-28 12:52:40,721 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:52:40,721 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24590 states and 45984 transitions. [2018-11-28 12:52:40,795 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17176 [2018-11-28 12:52:40,849 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24590 states to 24590 states and 45984 transitions. [2018-11-28 12:52:40,849 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24590 [2018-11-28 12:52:40,865 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24590 [2018-11-28 12:52:40,865 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24590 states and 45984 transitions. [2018-11-28 12:52:40,879 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:40,879 INFO L705 BuchiCegarLoop]: Abstraction has 24590 states and 45984 transitions. [2018-11-28 12:52:40,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24590 states and 45984 transitions. [2018-11-28 12:52:41,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24590 to 16144. [2018-11-28 12:52:41,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16144 states. [2018-11-28 12:52:41,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16144 states to 16144 states and 30305 transitions. [2018-11-28 12:52:41,021 INFO L728 BuchiCegarLoop]: Abstraction has 16144 states and 30305 transitions. [2018-11-28 12:52:41,021 INFO L608 BuchiCegarLoop]: Abstraction has 16144 states and 30305 transitions. [2018-11-28 12:52:41,021 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-28 12:52:41,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16144 states and 30305 transitions. [2018-11-28 12:52:41,052 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8984 [2018-11-28 12:52:41,052 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:41,052 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:41,055 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:41,055 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:41,055 INFO L794 eck$LassoCheckResult]: Stem: 208174#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 208175#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 209185#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 209186#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 209414#L1143 assume 0 != main_~tmp~14; 209415#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 209608#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 208995#L250 assume !(0 == getOrigin_~person); 208664#L254 assume !(1 == getOrigin_~person); 208606#L258 assume !(2 == getOrigin_~person); 208607#L262 assume !(3 == getOrigin_~person); 209218#L266 assume !(4 == getOrigin_~person); 209165#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 209166#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 207526#L1525 assume 0 == initPersonOnFloor_~floor; 207527#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 207217#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 209139#L1317 assume !(0 == callOnFloor_~floorID); 209381#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 209196#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 209965#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 209983#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 209987#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 209984#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 209985#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 210252#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 210251#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 210249#L2875 assume !(0 != timeShift_~tmp___9~2); 210248#L2966 assume !(1 == ~doorState~0); 210247#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 210245#L2318 assume !(1 == stopRequestedInDirection_~dir); 210246#L2487 assume !(0 == ~currentFloorID~0); 207565#L2493 assume !(~currentFloorID~0 > 0); 207508#L2508 assume ~currentFloorID~0 > 0; 209478#L2510 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 209480#L2511 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 210032#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 210033#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 210400#L2694 assume !(1 == ~currentHeading~0); 210397#L2704 assume !(0 == ~currentFloorID~0); 210393#L2704-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210387#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 210386#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 210385#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 210379#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 210375#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 210365#L112-1 cleanup_~i~2 := 0; 210362#L947-2 [2018-11-28 12:52:41,055 INFO L796 eck$LassoCheckResult]: Loop: 210362#L947-2 assume !false; 210360#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 210358#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 210352#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 210348#L955 assume 1 != cleanup_~tmp___0~3; 210343#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 210337#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 210338#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 210341#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 210297#L2226 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 210281#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 210257#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 210180#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 210178#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 210176#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 210174#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 210171#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 210168#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 210160#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 210157#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 210154#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 210151#L2875-1 assume !(0 != timeShift_~tmp___9~2); 210148#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 210146#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 210142#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 210143#L2487-2 assume !(0 == ~currentFloorID~0); 219294#L2493-2 assume !(~currentFloorID~0 > 0); 219065#L2508-2 assume ~currentFloorID~0 > 0; 209498#L2510-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 209499#L2511-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 213586#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 219056#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 219055#L2694-3 assume !(1 == ~currentHeading~0); 219053#L2704-9 assume !(0 == ~currentFloorID~0); 210035#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 219034#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 219030#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 219013#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 219005#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 219001#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 210364#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 210362#L947-2 [2018-11-28 12:52:41,055 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:41,056 INFO L82 PathProgramCache]: Analyzing trace with hash -437305025, now seen corresponding path program 1 times [2018-11-28 12:52:41,056 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:41,056 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:41,056 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:41,056 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:41,057 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:41,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:41,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:41,101 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:41,101 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:41,101 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:41,101 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:41,102 INFO L82 PathProgramCache]: Analyzing trace with hash -1585179207, now seen corresponding path program 1 times [2018-11-28 12:52:41,102 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:41,102 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:41,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:41,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:41,103 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:41,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:41,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:41,121 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:41,121 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:52:41,121 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:41,121 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:52:41,121 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:52:41,121 INFO L87 Difference]: Start difference. First operand 16144 states and 30305 transitions. cyclomatic complexity: 14162 Second operand 5 states. [2018-11-28 12:52:41,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:41,850 INFO L93 Difference]: Finished difference Result 22126 states and 41402 transitions. [2018-11-28 12:52:41,850 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:52:41,850 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22126 states and 41402 transitions. [2018-11-28 12:52:41,911 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17249 [2018-11-28 12:52:41,959 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22126 states to 22126 states and 41402 transitions. [2018-11-28 12:52:41,959 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22126 [2018-11-28 12:52:41,973 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22126 [2018-11-28 12:52:41,974 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22126 states and 41402 transitions. [2018-11-28 12:52:41,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:41,986 INFO L705 BuchiCegarLoop]: Abstraction has 22126 states and 41402 transitions. [2018-11-28 12:52:41,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22126 states and 41402 transitions. [2018-11-28 12:52:42,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22126 to 12294. [2018-11-28 12:52:42,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12294 states. [2018-11-28 12:52:42,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12294 states to 12294 states and 22960 transitions. [2018-11-28 12:52:42,122 INFO L728 BuchiCegarLoop]: Abstraction has 12294 states and 22960 transitions. [2018-11-28 12:52:42,122 INFO L608 BuchiCegarLoop]: Abstraction has 12294 states and 22960 transitions. [2018-11-28 12:52:42,122 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-28 12:52:42,122 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12294 states and 22960 transitions. [2018-11-28 12:52:42,149 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9024 [2018-11-28 12:52:42,149 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:42,149 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:42,150 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:42,150 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:42,151 INFO L794 eck$LassoCheckResult]: Stem: 246389#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 246390#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 247310#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 247311#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 247516#L1143 assume 0 != main_~tmp~14; 247517#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 247694#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 247141#L250 assume !(0 == getOrigin_~person); 246844#L254 assume !(1 == getOrigin_~person); 246790#L258 assume !(2 == getOrigin_~person); 246791#L262 assume !(3 == getOrigin_~person); 247338#L266 assume !(4 == getOrigin_~person); 247293#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 247294#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 245791#L1525 assume 0 == initPersonOnFloor_~floor; 245792#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 245511#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 247265#L1317 assume !(0 == callOnFloor_~floorID); 247490#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 247320#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 247995#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 247994#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 247993#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 246473#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 246474#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 246751#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 247249#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 247996#L2875 assume !(0 != timeShift_~tmp___9~2); 247696#L2966 assume !(1 == ~doorState~0); 247686#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 245759#L2318 assume !(1 == stopRequestedInDirection_~dir); 245760#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 246283#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 245890#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 245891#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 245877#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 245768#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 245769#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 245606#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 247105#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 247106#L2694-2 assume !(1 == ~currentHeading~0); 246471#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 246462#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 246463#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 252796#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 252795#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 252789#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 252785#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 252775#L112-1 cleanup_~i~2 := 0; 252762#L947-2 [2018-11-28 12:52:42,151 INFO L796 eck$LassoCheckResult]: Loop: 252762#L947-2 assume !false; 252761#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 252754#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 252730#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 252711#L955 assume 1 != cleanup_~tmp___0~3; 252704#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 252702#L1254-21 assume !(0 == isFloorCalling_~floorID); 245716#L1258-21 assume !(1 == isFloorCalling_~floorID); 245717#L1262-21 assume !(2 == isFloorCalling_~floorID); 246882#L1266-21 assume !(3 == isFloorCalling_~floorID); 246550#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 246551#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 251722#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 251723#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 252757#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 248020#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 248021#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 248015#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 248014#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 248013#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 248012#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 248011#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 248010#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 248009#L2875-1 assume !(0 != timeShift_~tmp___9~2); 248008#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 248007#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 245774#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 245775#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 246286#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 245896#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 245897#L2749-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 245885#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 245771#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 245772#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 245645#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 247110#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 247112#L2694-5 assume !(1 == ~currentHeading~0); 247990#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 246455#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 246451#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 252838#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 252837#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 252814#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 252810#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 252774#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 252762#L947-2 [2018-11-28 12:52:42,151 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:42,151 INFO L82 PathProgramCache]: Analyzing trace with hash 380428651, now seen corresponding path program 1 times [2018-11-28 12:52:42,151 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:42,151 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:42,152 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,152 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:42,152 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:42,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:42,227 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:42,227 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:42,227 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:42,228 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:42,228 INFO L82 PathProgramCache]: Analyzing trace with hash -76654782, now seen corresponding path program 1 times [2018-11-28 12:52:42,228 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:42,228 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:42,229 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,229 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:42,229 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:42,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:42,351 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:42,351 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:42,352 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:42,352 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:52:42,352 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:52:42,352 INFO L87 Difference]: Start difference. First operand 12294 states and 22960 transitions. cyclomatic complexity: 10667 Second operand 4 states. [2018-11-28 12:52:42,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:42,506 INFO L93 Difference]: Finished difference Result 37022 states and 69050 transitions. [2018-11-28 12:52:42,506 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:52:42,506 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37022 states and 69050 transitions. [2018-11-28 12:52:42,611 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33591 [2018-11-28 12:52:42,686 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37022 states to 37022 states and 69050 transitions. [2018-11-28 12:52:42,686 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37022 [2018-11-28 12:52:42,707 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37022 [2018-11-28 12:52:42,707 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37022 states and 69050 transitions. [2018-11-28 12:52:42,725 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:42,725 INFO L705 BuchiCegarLoop]: Abstraction has 37022 states and 69050 transitions. [2018-11-28 12:52:42,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37022 states and 69050 transitions. [2018-11-28 12:52:42,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37022 to 12306. [2018-11-28 12:52:42,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12306 states. [2018-11-28 12:52:42,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12306 states to 12306 states and 22972 transitions. [2018-11-28 12:52:42,864 INFO L728 BuchiCegarLoop]: Abstraction has 12306 states and 22972 transitions. [2018-11-28 12:52:42,864 INFO L608 BuchiCegarLoop]: Abstraction has 12306 states and 22972 transitions. [2018-11-28 12:52:42,864 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-28 12:52:42,864 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12306 states and 22972 transitions. [2018-11-28 12:52:42,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9034 [2018-11-28 12:52:42,886 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:42,886 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:42,887 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:42,887 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:42,887 INFO L794 eck$LassoCheckResult]: Stem: 295737#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 295738#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 296699#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 296700#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 296934#L1143 assume 0 != main_~tmp~14; 296935#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 297132#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 296517#L250 assume !(0 == getOrigin_~person); 296202#L254 assume !(1 == getOrigin_~person); 296143#L258 assume !(2 == getOrigin_~person); 296144#L262 assume !(3 == getOrigin_~person); 296738#L266 assume !(4 == getOrigin_~person); 296675#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 296676#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 295119#L1525 assume 0 == initPersonOnFloor_~floor; 295120#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 294841#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 296648#L1317 assume !(0 == callOnFloor_~floorID); 296908#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 296712#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 297499#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 297498#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 297496#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 295823#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 295824#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 296104#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 296632#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 297501#L2875 assume !(0 != timeShift_~tmp___9~2); 297134#L2966 assume !(1 == ~doorState~0); 297122#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 295088#L2318 assume !(1 == stopRequestedInDirection_~dir); 295089#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 295627#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 295217#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 295218#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 295886#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297500#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 295629#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 294936#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 296474#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 296475#L2694-2 assume !(1 == ~currentHeading~0); 295821#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 295811#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 295812#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 296974#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 296975#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 295583#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 297312#L102 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 294884#L112-1 cleanup_~i~2 := 0; 297726#L947-2 [2018-11-28 12:52:42,887 INFO L796 eck$LassoCheckResult]: Loop: 297726#L947-2 assume !false; 297725#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 297724#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 297723#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 297722#L955 assume 1 != cleanup_~tmp___0~3; 297721#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 297719#L1254-21 assume !(0 == isFloorCalling_~floorID); 297718#L1258-21 assume !(1 == isFloorCalling_~floorID); 297717#L1262-21 assume !(2 == isFloorCalling_~floorID); 297716#L1266-21 assume !(3 == isFloorCalling_~floorID); 297715#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 297714#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 297712#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 297632#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 297633#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 297603#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 297604#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 297601#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 297600#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 297599#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 297598#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 297596#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 297595#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 297593#L2875-1 assume !(0 != timeShift_~tmp___9~2); 297592#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 297588#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297558#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 297541#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 297535#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 297534#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 297533#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 297532#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297531#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 295621#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 295095#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 297782#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 297780#L2694-5 assume !(1 == ~currentHeading~0); 297777#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 297773#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 297772#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 297771#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 297770#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 297764#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 297737#L102-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 297727#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 297726#L947-2 [2018-11-28 12:52:42,888 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:42,888 INFO L82 PathProgramCache]: Analyzing trace with hash 380428651, now seen corresponding path program 2 times [2018-11-28 12:52:42,888 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:42,888 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:42,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,889 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:42,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:42,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:42,952 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:42,952 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:42,952 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:42,953 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:42,953 INFO L82 PathProgramCache]: Analyzing trace with hash -1356518460, now seen corresponding path program 1 times [2018-11-28 12:52:42,953 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:42,953 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:42,953 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,953 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:42,954 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:42,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:42,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:42,978 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:42,979 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:42,979 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:42,979 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:52:42,979 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:52:42,979 INFO L87 Difference]: Start difference. First operand 12306 states and 22972 transitions. cyclomatic complexity: 10667 Second operand 4 states. [2018-11-28 12:52:43,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:43,258 INFO L93 Difference]: Finished difference Result 39262 states and 73413 transitions. [2018-11-28 12:52:43,259 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:52:43,259 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39262 states and 73413 transitions. [2018-11-28 12:52:43,360 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33074 [2018-11-28 12:52:43,434 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39262 states to 39262 states and 73413 transitions. [2018-11-28 12:52:43,434 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39262 [2018-11-28 12:52:43,456 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39262 [2018-11-28 12:52:43,456 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39262 states and 73413 transitions. [2018-11-28 12:52:43,474 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:43,474 INFO L705 BuchiCegarLoop]: Abstraction has 39262 states and 73413 transitions. [2018-11-28 12:52:43,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39262 states and 73413 transitions. [2018-11-28 12:52:43,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39262 to 12340. [2018-11-28 12:52:43,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12340 states. [2018-11-28 12:52:43,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12340 states to 12340 states and 23006 transitions. [2018-11-28 12:52:43,620 INFO L728 BuchiCegarLoop]: Abstraction has 12340 states and 23006 transitions. [2018-11-28 12:52:43,620 INFO L608 BuchiCegarLoop]: Abstraction has 12340 states and 23006 transitions. [2018-11-28 12:52:43,620 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-28 12:52:43,620 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12340 states and 23006 transitions. [2018-11-28 12:52:43,642 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9058 [2018-11-28 12:52:43,642 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:43,642 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:43,643 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:43,643 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:43,643 INFO L794 eck$LassoCheckResult]: Stem: 347292#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 347293#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 348230#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 348231#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 348432#L1143 assume 0 != main_~tmp~14; 348433#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 348606#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 348059#L250 assume !(0 == getOrigin_~person); 347754#L254 assume !(1 == getOrigin_~person); 347694#L258 assume !(2 == getOrigin_~person); 347695#L262 assume !(3 == getOrigin_~person); 348256#L266 assume !(4 == getOrigin_~person); 348212#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 348213#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 346700#L1525 assume 0 == initPersonOnFloor_~floor; 346701#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 346423#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 348182#L1317 assume !(0 == callOnFloor_~floorID); 348410#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 348239#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 348957#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 348955#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 348954#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 347374#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 347375#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 347655#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 348166#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 348959#L2875 assume !(0 != timeShift_~tmp___9~2); 348608#L2966 assume !(1 == ~doorState~0); 348600#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 346670#L2318 assume !(1 == stopRequestedInDirection_~dir); 346671#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 347184#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 346794#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 346795#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 347439#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 348958#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 347186#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 346518#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 348019#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 348020#L2694-2 assume !(1 == ~currentHeading~0); 347372#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 347363#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 347364#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 353731#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 353730#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 353725#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 353732#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 353720#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 353710#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 353709#L112-1 cleanup_~i~2 := 0; 353707#L947-2 [2018-11-28 12:52:43,643 INFO L796 eck$LassoCheckResult]: Loop: 353707#L947-2 assume !false; 353706#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 353705#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 353704#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 353703#L955 assume 1 != cleanup_~tmp___0~3; 353702#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 353700#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 353701#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 349119#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 349121#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 349109#L1254-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 349106#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 351319#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 349581#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 349582#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 349577#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 349578#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 353653#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 353644#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 353645#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 353651#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 353650#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 353649#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 353647#L2875-1 assume !(0 != timeShift_~tmp___9~2); 348597#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 348598#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 346683#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 346684#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 347917#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 346802#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 346803#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 347441#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 353642#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 347177#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 347178#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 353587#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 353586#L2694-5 assume !(1 == ~currentHeading~0); 353584#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 347356#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 353763#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 353762#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 353761#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 353756#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 353764#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 353751#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 353741#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 353708#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 353707#L947-2 [2018-11-28 12:52:43,643 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:43,644 INFO L82 PathProgramCache]: Analyzing trace with hash 519899272, now seen corresponding path program 1 times [2018-11-28 12:52:43,644 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:43,644 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:43,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:43,644 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:43,645 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:43,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:43,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:43,685 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:43,685 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:43,685 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:43,685 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:43,685 INFO L82 PathProgramCache]: Analyzing trace with hash -886781859, now seen corresponding path program 1 times [2018-11-28 12:52:43,685 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:43,685 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:43,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:43,686 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:43,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:43,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:43,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:43,701 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:43,701 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:43,701 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:43,701 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:52:43,701 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:52:43,701 INFO L87 Difference]: Start difference. First operand 12340 states and 23006 transitions. cyclomatic complexity: 10667 Second operand 3 states. [2018-11-28 12:52:43,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:43,915 INFO L93 Difference]: Finished difference Result 16979 states and 31518 transitions. [2018-11-28 12:52:43,915 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:52:43,915 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16979 states and 31518 transitions. [2018-11-28 12:52:43,955 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13595 [2018-11-28 12:52:43,984 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16979 states to 16979 states and 31518 transitions. [2018-11-28 12:52:43,984 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16979 [2018-11-28 12:52:43,993 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16979 [2018-11-28 12:52:43,993 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16979 states and 31518 transitions. [2018-11-28 12:52:44,001 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:44,001 INFO L705 BuchiCegarLoop]: Abstraction has 16979 states and 31518 transitions. [2018-11-28 12:52:44,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16979 states and 31518 transitions. [2018-11-28 12:52:44,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16979 to 12265. [2018-11-28 12:52:44,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12265 states. [2018-11-28 12:52:44,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12265 states to 12265 states and 22806 transitions. [2018-11-28 12:52:44,082 INFO L728 BuchiCegarLoop]: Abstraction has 12265 states and 22806 transitions. [2018-11-28 12:52:44,082 INFO L608 BuchiCegarLoop]: Abstraction has 12265 states and 22806 transitions. [2018-11-28 12:52:44,082 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-28 12:52:44,082 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12265 states and 22806 transitions. [2018-11-28 12:52:44,160 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8989 [2018-11-28 12:52:44,161 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:44,161 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:44,161 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:44,161 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:44,162 INFO L794 eck$LassoCheckResult]: Stem: 376634#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 376635#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 377575#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 377576#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 377793#L1143 assume 0 != main_~tmp~14; 377794#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 377965#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 377400#L250 assume !(0 == getOrigin_~person); 377092#L254 assume !(1 == getOrigin_~person); 377034#L258 assume !(2 == getOrigin_~person); 377035#L262 assume !(3 == getOrigin_~person); 377608#L266 assume !(4 == getOrigin_~person); 377557#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 377558#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 376024#L1525 assume 0 == initPersonOnFloor_~floor; 376025#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 375752#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 377530#L1317 assume !(0 == callOnFloor_~floorID); 377770#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 377585#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 378292#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 378291#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 378290#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 376718#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 376719#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 376994#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 377513#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 378293#L2875 assume !(0 != timeShift_~tmp___9~2); 377967#L2966 assume !(1 == ~doorState~0); 377956#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 375994#L2318 assume !(1 == stopRequestedInDirection_~dir); 375995#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 376521#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 376121#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 376122#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 376781#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 378296#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 376523#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 375844#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 377360#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 377361#L2694-2 assume !(1 == ~currentHeading~0); 376716#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 376708#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 376096#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 376097#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 377830#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 376479#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 377447#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 378133#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 376456#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 375794#L112-1 cleanup_~i~2 := 0; 376449#L947-2 [2018-11-28 12:52:44,162 INFO L796 eck$LassoCheckResult]: Loop: 376449#L947-2 assume !false; 376118#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 375785#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 375786#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 377396#L955 assume 1 != cleanup_~tmp___0~3; 377397#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 378308#L1254-21 assume !(0 == isFloorCalling_~floorID); 383974#L1258-21 assume !(1 == isFloorCalling_~floorID); 383978#L1262-21 assume !(2 == isFloorCalling_~floorID); 383977#L1266-21 assume !(3 == isFloorCalling_~floorID); 383975#L1270-21 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 383904#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 383905#L2222 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 383983#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 383980#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 383972#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 383971#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 376654#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 383968#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 383969#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 383970#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 383966#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 383906#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 383907#L2875-1 assume !(0 != timeShift_~tmp___9~2); 385818#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 385817#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 385815#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 385816#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 385801#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 386994#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 385788#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 386992#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 386991#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 386976#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 375882#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 377365#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 377366#L2694-5 assume !(1 == ~currentHeading~0); 386855#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 376702#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 376075#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 376076#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 377836#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 376403#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 377442#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 378140#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 376501#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 375780#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 376449#L947-2 [2018-11-28 12:52:44,162 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:44,162 INFO L82 PathProgramCache]: Analyzing trace with hash 519899272, now seen corresponding path program 2 times [2018-11-28 12:52:44,162 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:44,162 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:44,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,163 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:44,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:44,221 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:44,221 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:44,221 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:44,221 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:44,222 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:44,222 INFO L82 PathProgramCache]: Analyzing trace with hash 2056195201, now seen corresponding path program 1 times [2018-11-28 12:52:44,222 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:44,222 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:44,223 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,223 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:44,223 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:44,272 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:44,272 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:44,272 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:52:44,272 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:44,273 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:52:44,273 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:52:44,273 INFO L87 Difference]: Start difference. First operand 12265 states and 22806 transitions. cyclomatic complexity: 10542 Second operand 3 states. [2018-11-28 12:52:44,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:44,487 INFO L93 Difference]: Finished difference Result 13037 states and 24172 transitions. [2018-11-28 12:52:44,488 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:52:44,488 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13037 states and 24172 transitions. [2018-11-28 12:52:44,523 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9653 [2018-11-28 12:52:44,548 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13037 states to 13037 states and 24172 transitions. [2018-11-28 12:52:44,548 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13037 [2018-11-28 12:52:44,555 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13037 [2018-11-28 12:52:44,556 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13037 states and 24172 transitions. [2018-11-28 12:52:44,562 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:52:44,562 INFO L705 BuchiCegarLoop]: Abstraction has 13037 states and 24172 transitions. [2018-11-28 12:52:44,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13037 states and 24172 transitions. [2018-11-28 12:52:44,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13037 to 12091. [2018-11-28 12:52:44,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12091 states. [2018-11-28 12:52:44,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12091 states to 12091 states and 22552 transitions. [2018-11-28 12:52:44,633 INFO L728 BuchiCegarLoop]: Abstraction has 12091 states and 22552 transitions. [2018-11-28 12:52:44,633 INFO L608 BuchiCegarLoop]: Abstraction has 12091 states and 22552 transitions. [2018-11-28 12:52:44,633 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-28 12:52:44,633 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12091 states and 22552 transitions. [2018-11-28 12:52:44,653 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8815 [2018-11-28 12:52:44,653 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:44,654 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:44,654 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:44,654 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:44,655 INFO L794 eck$LassoCheckResult]: Stem: 401918#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 401919#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 402834#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 402835#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 403046#L1143 assume 0 != main_~tmp~14; 403047#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 403213#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 402661#L250 assume !(0 == getOrigin_~person); 402363#L254 assume !(1 == getOrigin_~person); 402309#L258 assume !(2 == getOrigin_~person); 402310#L262 assume !(3 == getOrigin_~person); 402862#L266 assume !(4 == getOrigin_~person); 402818#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 402819#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 401325#L1525 assume 0 == initPersonOnFloor_~floor; 401326#L1526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 401064#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 402790#L1317 assume !(0 == callOnFloor_~floorID); 403024#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 402844#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 403521#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 403520#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 403519#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 402000#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 402001#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 402274#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 402773#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 403522#L2875 assume !(0 != timeShift_~tmp___9~2); 403215#L2966 assume !(1 == ~doorState~0); 403206#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 401295#L2318 assume !(1 == stopRequestedInDirection_~dir); 401296#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 401809#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 401422#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 401423#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 402064#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 403525#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 401811#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 401152#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 402621#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 402622#L2694-2 assume !(1 == ~currentHeading~0); 401998#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 401989#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 401990#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 412610#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 412608#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 402704#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 402705#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 403371#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 412557#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 412556#L112-1 cleanup_~i~2 := 0; 412554#L947-2 [2018-11-28 12:52:44,655 INFO L796 eck$LassoCheckResult]: Loop: 412554#L947-2 assume !false; 412553#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 412552#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 403536#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 403535#L955 assume 1 != cleanup_~tmp___0~3; 403534#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 403533#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 403531#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 403532#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 403526#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 403528#L1254-22 assume !(0 == isFloorCalling_~floorID); 401204#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 401205#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 402541#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 401772#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 403446#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 403447#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 407145#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 403565#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 403559#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 403560#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 407093#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 407092#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 407091#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 407089#L2875-1 assume !(0 != timeShift_~tmp___9~2); 407088#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 403210#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 401308#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 401309#L2487-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 402524#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 412910#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 412803#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 412908#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 412906#L2318-3 assume !(1 == stopRequestedInDirection_~dir); 412888#L2487-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 412877#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 412875#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 412876#L2694-5 assume !(1 == ~currentHeading~0); 412960#L2704-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 401981#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 412592#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 412591#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 412590#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 412584#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 412589#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 412579#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 412569#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 412555#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 412554#L947-2 [2018-11-28 12:52:44,655 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:44,655 INFO L82 PathProgramCache]: Analyzing trace with hash 519899272, now seen corresponding path program 3 times [2018-11-28 12:52:44,655 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:44,655 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:44,656 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,656 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:44,656 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:44,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:44,724 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:44,724 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:52:44,724 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:44,725 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:44,725 INFO L82 PathProgramCache]: Analyzing trace with hash -592268885, now seen corresponding path program 1 times [2018-11-28 12:52:44,725 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:44,725 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:44,725 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,725 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:44,725 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:44,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:52:44,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:52:45,250 WARN L180 SmtUtils]: Spent 482.00 ms on a formula simplification. DAG size of input: 196 DAG size of output: 176 [2018-11-28 12:52:45,639 WARN L180 SmtUtils]: Spent 379.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 140 [2018-11-28 12:52:45,646 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:52:45,647 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:52:45,647 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:52:45,647 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:52:45,647 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 12:52:45,647 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:45,647 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:52:45,647 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:52:45,648 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration13_Loop [2018-11-28 12:52:45,648 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:52:45,648 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:52:45,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,839 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:45,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,313 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:52:46,314 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,325 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,325 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,341 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,341 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,364 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,364 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,368 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,369 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,399 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,399 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,404 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,404 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret101=0} Honda state: {ULTIMATE.start_timeShift_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,444 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,444 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,455 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,455 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,486 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,486 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,491 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,491 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,508 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,508 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,515 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,515 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,541 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,541 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,547 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,547 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,566 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,566 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,568 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,569 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,589 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,589 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,592 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,592 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,608 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,608 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,612 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,612 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~1=-8, ~calls_1~0=-8} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~1=-8, ~calls_1~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,629 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,629 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,631 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,631 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret97=0} Honda state: {ULTIMATE.start_timeShift_#t~ret97=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,648 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,648 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,651 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,651 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret95=0} Honda state: {ULTIMATE.start_timeShift_#t~ret95=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,725 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,725 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,728 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,728 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~18=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,744 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,745 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,749 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,750 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,777 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,777 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,779 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,779 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,795 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,795 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,797 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,797 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,812 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,812 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,814 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,815 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,831 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,831 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,833 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,834 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret66=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret66=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,849 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,849 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,853 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:52:46,853 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,870 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:52:46,870 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b557a9dc-3bc6-44d7-bc07-205971ec63f9/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,889 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 12:52:46,889 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:52:46,896 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 12:52:46,909 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:52:46,909 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:52:46,909 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:52:46,909 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:52:46,909 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 12:52:46,909 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:52:46,909 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:52:46,909 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:52:46,909 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product25_true-unreach-call_true-termination.cil.c_Iteration13_Loop [2018-11-28 12:52:46,909 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:52:46,909 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:52:46,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,922 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:46,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,141 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,225 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:52:47,716 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:52:47,720 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 12:52:47,721 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,722 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,722 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,723 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,723 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,723 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,724 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,725 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,726 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,727 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,727 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,727 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,727 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,727 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,728 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,728 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,728 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,728 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,729 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,729 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,729 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,729 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,729 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,729 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,729 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,730 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,730 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,730 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,730 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,731 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,731 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,731 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,731 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,731 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,731 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,732 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,732 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,732 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,732 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,732 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,732 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,732 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,733 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,733 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,733 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,734 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,734 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,734 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,734 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,734 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,734 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,735 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,735 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,735 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,736 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,736 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,736 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,736 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,736 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,736 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,736 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,737 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,737 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,737 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,738 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,738 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,738 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,738 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,738 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,738 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,739 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,739 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,739 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,739 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,740 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,740 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,740 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,740 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,740 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,740 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,741 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,741 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,741 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,742 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,742 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,742 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,742 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,742 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,742 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,743 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,743 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,743 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,743 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,744 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,744 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,744 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,744 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,744 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,745 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,745 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,745 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,745 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,745 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,745 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,746 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,746 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,746 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,747 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,747 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,747 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,747 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,747 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,747 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,748 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,748 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,748 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,748 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,749 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,749 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,749 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,749 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,749 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,749 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,750 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,750 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,750 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,751 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,751 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,751 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,751 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,751 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,751 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,752 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,752 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,753 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:52:47,753 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:52:47,754 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:52:47,754 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:52:47,754 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:52:47,754 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:52:47,754 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:52:47,755 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:52:47,755 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:52:47,759 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 12:52:47,771 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2018-11-28 12:52:47,771 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 0 variables to zero. [2018-11-28 12:52:47,773 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 12:52:47,773 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 12:52:47,774 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 12:52:47,774 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = -2*~currentFloorID~0 + 1 Supporting invariants [] [2018-11-28 12:52:47,775 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 12:52:47,826 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:47,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:47,948 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:52:48,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:48,003 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:52:48,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:48,065 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-28 12:52:48,066 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 12091 states and 22552 transitions. cyclomatic complexity: 10462 Second operand 5 states. [2018-11-28 12:52:48,839 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 12091 states and 22552 transitions. cyclomatic complexity: 10462. Second operand 5 states. Result 39628 states and 73508 transitions. Complement of second has 8 states. [2018-11-28 12:52:48,840 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 2 non-accepting loop states 1 accepting loop states [2018-11-28 12:52:48,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-28 12:52:48,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 6790 transitions. [2018-11-28 12:52:48,851 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 6790 transitions. Stem has 51 letters. Loop has 48 letters. [2018-11-28 12:52:48,854 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:52:48,854 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 6790 transitions. Stem has 99 letters. Loop has 48 letters. [2018-11-28 12:52:48,855 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:52:48,855 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 6790 transitions. Stem has 51 letters. Loop has 96 letters. [2018-11-28 12:52:48,857 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:52:48,857 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39628 states and 73508 transitions. [2018-11-28 12:52:48,977 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 17424 [2018-11-28 12:52:49,067 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39628 states to 30813 states and 56981 transitions. [2018-11-28 12:52:49,067 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21448 [2018-11-28 12:52:49,084 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21457 [2018-11-28 12:52:49,085 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30813 states and 56981 transitions. [2018-11-28 12:52:49,086 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:52:49,086 INFO L705 BuchiCegarLoop]: Abstraction has 30813 states and 56981 transitions. [2018-11-28 12:52:49,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30813 states and 56981 transitions. [2018-11-28 12:52:49,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30813 to 30792. [2018-11-28 12:52:49,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30792 states. [2018-11-28 12:52:49,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30792 states to 30792 states and 56960 transitions. [2018-11-28 12:52:49,349 INFO L728 BuchiCegarLoop]: Abstraction has 30792 states and 56960 transitions. [2018-11-28 12:52:49,350 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:52:49,350 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:52:49,350 INFO L87 Difference]: Start difference. First operand 30792 states and 56960 transitions. Second operand 6 states. [2018-11-28 12:52:49,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:49,518 INFO L93 Difference]: Finished difference Result 30786 states and 56947 transitions. [2018-11-28 12:52:49,518 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-28 12:52:49,518 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30786 states and 56947 transitions. [2018-11-28 12:52:49,619 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 17424 [2018-11-28 12:52:49,678 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30786 states to 30786 states and 56947 transitions. [2018-11-28 12:52:49,679 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21436 [2018-11-28 12:52:49,691 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21436 [2018-11-28 12:52:49,692 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30786 states and 56947 transitions. [2018-11-28 12:52:49,694 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:52:49,694 INFO L705 BuchiCegarLoop]: Abstraction has 30786 states and 56947 transitions. [2018-11-28 12:52:49,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30786 states and 56947 transitions. [2018-11-28 12:52:50,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30786 to 30786. [2018-11-28 12:52:50,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30786 states. [2018-11-28 12:52:50,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30786 states to 30786 states and 56947 transitions. [2018-11-28 12:52:50,110 INFO L728 BuchiCegarLoop]: Abstraction has 30786 states and 56947 transitions. [2018-11-28 12:52:50,110 INFO L608 BuchiCegarLoop]: Abstraction has 30786 states and 56947 transitions. [2018-11-28 12:52:50,110 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-28 12:52:50,110 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30786 states and 56947 transitions. [2018-11-28 12:52:50,176 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 17424 [2018-11-28 12:52:50,176 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:50,176 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:50,177 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:50,177 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:50,177 INFO L794 eck$LassoCheckResult]: Stem: 516027#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 516028#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 517404#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 517405#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 517721#L1143 assume 0 != main_~tmp~14; 517722#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 518009#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 517148#L250 assume !(0 == getOrigin_~person); 516686#L254 assume !(1 == getOrigin_~person); 516609#L258 assume !(2 == getOrigin_~person); 516610#L262 assume !(3 == getOrigin_~person); 517449#L266 assume !(4 == getOrigin_~person); 517383#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 517384#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 515127#L1525 assume !(0 == initPersonOnFloor_~floor); 515128#L1552 assume 1 == initPersonOnFloor_~floor; 518270#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 514693#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 517339#L1317 assume !(0 == callOnFloor_~floorID); 517685#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 517419#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 518545#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 518544#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 518543#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 516154#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 516155#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 516554#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 517314#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 518540#L2875 assume !(0 != timeShift_~tmp___9~2); 518011#L2966 assume !(1 == ~doorState~0); 517994#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 515083#L2318 assume !(1 == stopRequestedInDirection_~dir); 515084#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 515873#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 515279#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 515280#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 516246#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 518539#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 515875#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 514849#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 517087#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 517088#L2694-2 assume !(1 == ~currentHeading~0); 516152#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 516142#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 516143#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 518582#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 518581#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 518576#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 518574#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 518570#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 518560#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 518559#L112-1 cleanup_~i~2 := 0; 518555#L947-2 assume !false; 518556#L948 [2018-11-28 12:52:50,178 INFO L796 eck$LassoCheckResult]: Loop: 518556#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 535408#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 535406#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 535405#L955 assume 1 != cleanup_~tmp___0~3; 535404#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 535372#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 535370#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 535365#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 535362#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 535363#L1254-22 assume !(0 == isFloorCalling_~floorID); 545459#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 545457#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 545440#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 545435#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 545434#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 545433#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 545275#L1254-26 assume !(0 == isFloorCalling_~floorID); 514966#L1258-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 514967#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 528611#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 528610#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 515856#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 515625#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 532721#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 532690#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 532689#L2875-1 assume !(0 != timeShift_~tmp___9~2); 532688#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 532687#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 532685#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 532686#L2487-2 assume !(0 == ~currentFloorID~0); 515191#L2493-2 assume ~currentFloorID~0 > 0; 515117#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 515118#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 516040#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 517424#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 528584#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 539320#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 535473#L2694-3 assume !(1 == ~currentHeading~0); 535469#L2704-9 assume !(0 == ~currentFloorID~0); 535468#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 535465#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 535463#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 535451#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 535443#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 535436#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 535431#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 535421#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 535417#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 535415#L947-2 assume !false; 518556#L948 [2018-11-28 12:52:50,178 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:50,178 INFO L82 PathProgramCache]: Analyzing trace with hash -2141403484, now seen corresponding path program 1 times [2018-11-28 12:52:50,178 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:50,178 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:50,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:50,179 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:50,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:50,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:50,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:50,220 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:50,221 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:50,221 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:50,221 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:50,221 INFO L82 PathProgramCache]: Analyzing trace with hash -31504298, now seen corresponding path program 1 times [2018-11-28 12:52:50,221 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:50,221 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:50,222 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:50,222 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:50,222 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:50,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:50,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:50,275 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:50,275 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 12:52:50,275 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:50,275 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 12:52:50,275 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 12:52:50,275 INFO L87 Difference]: Start difference. First operand 30786 states and 56947 transitions. cyclomatic complexity: 26164 Second operand 7 states. [2018-11-28 12:52:51,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:51,635 INFO L93 Difference]: Finished difference Result 195541 states and 364990 transitions. [2018-11-28 12:52:51,635 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-28 12:52:51,635 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 195541 states and 364990 transitions. [2018-11-28 12:52:52,185 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 121399 [2018-11-28 12:52:52,674 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 195541 states to 195541 states and 364990 transitions. [2018-11-28 12:52:52,674 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 132404 [2018-11-28 12:52:52,757 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 132404 [2018-11-28 12:52:52,757 INFO L73 IsDeterministic]: Start isDeterministic. Operand 195541 states and 364990 transitions. [2018-11-28 12:52:52,760 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:52:52,761 INFO L705 BuchiCegarLoop]: Abstraction has 195541 states and 364990 transitions. [2018-11-28 12:52:52,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195541 states and 364990 transitions. [2018-11-28 12:52:56,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195541 to 59790. [2018-11-28 12:52:56,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59790 states. [2018-11-28 12:52:56,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59790 states to 59790 states and 110496 transitions. [2018-11-28 12:52:56,637 INFO L728 BuchiCegarLoop]: Abstraction has 59790 states and 110496 transitions. [2018-11-28 12:52:56,637 INFO L608 BuchiCegarLoop]: Abstraction has 59790 states and 110496 transitions. [2018-11-28 12:52:56,637 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-28 12:52:56,637 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 59790 states and 110496 transitions. [2018-11-28 12:52:56,751 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 34714 [2018-11-28 12:52:56,751 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:52:56,751 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:52:56,752 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:56,752 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:52:56,752 INFO L794 eck$LassoCheckResult]: Stem: 742400#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 742401#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 743806#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 743807#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 744125#L1143 assume 0 != main_~tmp~14; 744126#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 744417#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 743534#L250 assume !(0 == getOrigin_~person); 743085#L254 assume !(1 == getOrigin_~person); 743001#L258 assume !(2 == getOrigin_~person); 743002#L262 assume !(3 == getOrigin_~person); 743862#L266 assume !(4 == getOrigin_~person); 743778#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 743779#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 741502#L1525 assume !(0 == initPersonOnFloor_~floor); 741503#L1552 assume 1 == initPersonOnFloor_~floor; 744652#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 741068#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 743734#L1317 assume !(0 == callOnFloor_~floorID); 744086#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 744087#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 744896#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 744915#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 744916#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 742543#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 742544#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 743706#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 743708#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 744908#L2875 assume !(0 != timeShift_~tmp___9~2); 744910#L2966 assume !(1 == ~doorState~0); 744404#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 744405#L2318 assume !(1 == stopRequestedInDirection_~dir); 742232#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 742233#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 744376#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 745128#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 745169#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 745168#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 742236#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 741224#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 744375#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 745120#L2694-2 assume !(1 == ~currentHeading~0); 742539#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 742540#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 745118#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 745116#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 745114#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 745100#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 745104#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 745081#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 745071#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 745069#L112-1 cleanup_~i~2 := 0; 745066#L947-2 assume !false; 745067#L948 [2018-11-28 12:52:56,752 INFO L796 eck$LassoCheckResult]: Loop: 745067#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 766023#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 766021#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 766018#L955 assume 1 != cleanup_~tmp___0~3; 766019#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 765990#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 765991#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 765981#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 765983#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 765970#L1254-22 assume !(0 == isFloorCalling_~floorID); 765971#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 765962#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 765963#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 765943#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 765944#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 765939#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 765940#L1254-26 assume !(0 == isFloorCalling_~floorID); 767410#L1258-26 assume !(1 == isFloorCalling_~floorID); 767409#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 767406#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 767405#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 767404#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 767402#L2135-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 767399#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 767398#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 767397#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 767395#L2875-1 assume !(0 != timeShift_~tmp___9~2); 767394#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 767393#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 767391#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 767392#L2487-2 assume !(0 == ~currentFloorID~0); 767957#L2493-2 assume ~currentFloorID~0 > 0; 767955#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 767953#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 767951#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 767931#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 767915#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 767913#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 767912#L2694-3 assume !(1 == ~currentHeading~0); 767909#L2704-9 assume !(0 == ~currentFloorID~0); 767285#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 767281#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 767254#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 767255#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 767237#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 767250#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 767247#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 767248#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 767200#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 767198#L947-2 assume !false; 745067#L948 [2018-11-28 12:52:56,753 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:56,753 INFO L82 PathProgramCache]: Analyzing trace with hash -2141403484, now seen corresponding path program 2 times [2018-11-28 12:52:56,753 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:56,753 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:56,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:56,754 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:52:56,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:56,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:56,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:56,802 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:56,802 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:52:56,803 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:52:56,803 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:52:56,803 INFO L82 PathProgramCache]: Analyzing trace with hash 1547609944, now seen corresponding path program 1 times [2018-11-28 12:52:56,803 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:52:56,803 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:52:56,804 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:56,804 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:52:56,804 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:52:56,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:52:56,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:52:56,850 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:52:56,850 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:52:56,851 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:52:56,851 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:52:56,851 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:52:56,851 INFO L87 Difference]: Start difference. First operand 59790 states and 110496 transitions. cyclomatic complexity: 50709 Second operand 5 states. [2018-11-28 12:52:58,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:52:58,311 INFO L93 Difference]: Finished difference Result 169209 states and 313646 transitions. [2018-11-28 12:52:58,311 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:52:58,311 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 169209 states and 313646 transitions. [2018-11-28 12:52:58,841 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 103148 [2018-11-28 12:52:59,201 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 169209 states to 169209 states and 313646 transitions. [2018-11-28 12:52:59,201 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 114697 [2018-11-28 12:52:59,270 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 114697 [2018-11-28 12:52:59,270 INFO L73 IsDeterministic]: Start isDeterministic. Operand 169209 states and 313646 transitions. [2018-11-28 12:52:59,273 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:52:59,273 INFO L705 BuchiCegarLoop]: Abstraction has 169209 states and 313646 transitions. [2018-11-28 12:52:59,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169209 states and 313646 transitions. [2018-11-28 12:52:59,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169209 to 82185. [2018-11-28 12:52:59,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82185 states. [2018-11-28 12:53:00,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82185 states to 82185 states and 152574 transitions. [2018-11-28 12:53:00,580 INFO L728 BuchiCegarLoop]: Abstraction has 82185 states and 152574 transitions. [2018-11-28 12:53:00,580 INFO L608 BuchiCegarLoop]: Abstraction has 82185 states and 152574 transitions. [2018-11-28 12:53:00,581 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-28 12:53:00,581 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 82185 states and 152574 transitions. [2018-11-28 12:53:00,727 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 49644 [2018-11-28 12:53:00,728 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:00,728 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:00,728 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:00,728 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:00,729 INFO L794 eck$LassoCheckResult]: Stem: 971436#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 971437#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 972872#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 972873#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 973210#L1143 assume 0 != main_~tmp~14; 973211#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 973533#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 972586#L250 assume !(0 == getOrigin_~person); 972126#L254 assume !(1 == getOrigin_~person); 972038#L258 assume !(2 == getOrigin_~person); 972039#L262 assume !(3 == getOrigin_~person); 972936#L266 assume !(4 == getOrigin_~person); 972842#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 972843#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 970526#L1525 assume !(0 == initPersonOnFloor_~floor); 970527#L1552 assume 1 == initPersonOnFloor_~floor; 973809#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 970089#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 972798#L1317 assume !(0 == callOnFloor_~floorID); 973168#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 973169#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 974074#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 974093#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 974094#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 971578#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 971579#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 972768#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 972770#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 974086#L2875 assume !(0 != timeShift_~tmp___9~2); 974088#L2966 assume !(1 == ~doorState~0); 973512#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 973513#L2318 assume !(1 == stopRequestedInDirection_~dir); 974186#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 971947#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 975161#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 974168#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 974099#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 974100#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 971277#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 970245#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 972529#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 972531#L2694-2 assume !(1 == ~currentHeading~0); 974155#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 971562#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 971563#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 978397#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 978395#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 978386#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 978383#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 978375#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 978365#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 978351#L112-1 cleanup_~i~2 := 0; 978348#L947-2 assume !false; 978349#L948 [2018-11-28 12:53:00,729 INFO L796 eck$LassoCheckResult]: Loop: 978349#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1002944#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1002943#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1002942#L955 assume 1 != cleanup_~tmp___0~3; 1002941#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1002940#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1002939#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1002937#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1002935#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1002934#L1254-22 assume !(0 == isFloorCalling_~floorID); 1002933#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1002932#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1002931#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1002928#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1002927#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1002926#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1002923#L1254-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1002894#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1002893#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1002892#L2131-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1002891#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1002889#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1002888#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1002886#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1002885#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1002884#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1002882#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1002881#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1002879#L2322-2 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1002880#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1002906#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1002904#L2749-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1002905#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1002685#L2318-3 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1002684#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1002681#L2322-3 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1002663#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1002655#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1002562#L2694-5 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1002563#L1828-9 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 1002537#L2698-15 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 1002538#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1002969#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1002500#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1002968#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1002963#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1002961#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1002957#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1002947#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1002946#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1002945#L947-2 assume !false; 978349#L948 [2018-11-28 12:53:00,729 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:00,729 INFO L82 PathProgramCache]: Analyzing trace with hash -2141403484, now seen corresponding path program 3 times [2018-11-28 12:53:00,729 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:00,729 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:00,730 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:00,730 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:00,730 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:00,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:00,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:00,788 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:00,788 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:00,788 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:00,788 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:00,788 INFO L82 PathProgramCache]: Analyzing trace with hash 969473059, now seen corresponding path program 1 times [2018-11-28 12:53:00,788 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:00,788 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:00,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:00,789 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:00,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:00,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:00,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:00,830 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:00,830 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:53:00,830 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:00,830 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:53:00,830 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:53:00,831 INFO L87 Difference]: Start difference. First operand 82185 states and 152574 transitions. cyclomatic complexity: 70392 Second operand 6 states. [2018-11-28 12:53:02,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:02,855 INFO L93 Difference]: Finished difference Result 300397 states and 558278 transitions. [2018-11-28 12:53:02,856 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-28 12:53:02,856 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 300397 states and 558278 transitions. [2018-11-28 12:53:04,049 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 192215 [2018-11-28 12:53:04,922 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 300397 states to 300397 states and 558278 transitions. [2018-11-28 12:53:04,922 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 201169 [2018-11-28 12:53:05,088 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 201169 [2018-11-28 12:53:05,088 INFO L73 IsDeterministic]: Start isDeterministic. Operand 300397 states and 558278 transitions. [2018-11-28 12:53:05,089 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:05,090 INFO L705 BuchiCegarLoop]: Abstraction has 300397 states and 558278 transitions. [2018-11-28 12:53:05,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300397 states and 558278 transitions. [2018-11-28 12:53:07,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300397 to 82125. [2018-11-28 12:53:07,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82125 states. [2018-11-28 12:53:07,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82125 states to 82125 states and 152470 transitions. [2018-11-28 12:53:07,512 INFO L728 BuchiCegarLoop]: Abstraction has 82125 states and 152470 transitions. [2018-11-28 12:53:07,512 INFO L608 BuchiCegarLoop]: Abstraction has 82125 states and 152470 transitions. [2018-11-28 12:53:07,512 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-28 12:53:07,513 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 82125 states and 152470 transitions. [2018-11-28 12:53:07,692 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 49604 [2018-11-28 12:53:07,692 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:07,692 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:07,693 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:07,693 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:07,693 INFO L794 eck$LassoCheckResult]: Stem: 1354087#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1354088#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1355534#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1355535#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1355875#L1143 assume 0 != main_~tmp~14; 1355876#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1356182#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1355255#L250 assume !(0 == getOrigin_~person); 1354775#L254 assume !(1 == getOrigin_~person); 1354688#L258 assume !(2 == getOrigin_~person); 1354689#L262 assume !(3 == getOrigin_~person); 1355601#L266 assume !(4 == getOrigin_~person); 1355504#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1355505#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1353149#L1525 assume !(0 == initPersonOnFloor_~floor); 1353150#L1552 assume 1 == initPersonOnFloor_~floor; 1356454#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 1352715#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1355456#L1317 assume !(0 == callOnFloor_~floorID); 1355837#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1355838#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1356749#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1356748#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1356747#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1354225#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1354226#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1354630#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1355429#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1356746#L2875 assume !(0 != timeShift_~tmp___9~2); 1356184#L2966 assume !(1 == ~doorState~0); 1356185#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1353104#L2318 assume !(1 == stopRequestedInDirection_~dir); 1353105#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1353921#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1353296#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1353297#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1360324#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1360306#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1353923#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1352871#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1355193#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1355195#L2694-2 assume !(1 == ~currentHeading~0); 1354222#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1354210#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1354211#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1360519#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1356286#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1353858#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1355322#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1356466#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1353829#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1352791#L112-1 cleanup_~i~2 := 0; 1360494#L947-2 assume !false; 1369061#L948 [2018-11-28 12:53:07,693 INFO L796 eck$LassoCheckResult]: Loop: 1369061#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1390462#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1390461#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1390460#L955 assume 1 != cleanup_~tmp___0~3; 1390459#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1390458#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1390457#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1390450#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1390447#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1390446#L1254-22 assume !(0 == isFloorCalling_~floorID); 1390445#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1390444#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1388574#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1388573#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1388571#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1388569#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1388567#L1254-26 assume !(0 == isFloorCalling_~floorID); 1388564#L1258-26 assume !(1 == isFloorCalling_~floorID); 1388565#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1399815#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1399814#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1399813#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1399812#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1399811#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1399808#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1399806#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1399805#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1399804#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1399803#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1399770#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1399760#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1399761#L2487-2 assume !(0 == ~currentFloorID~0); 1399785#L2493-2 assume ~currentFloorID~0 > 0; 1399784#L2494-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1399783#L1254-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1399767#L1281-32 stopRequestedInDirection_#t~ret74 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret74;havoc stopRequestedInDirection_#t~ret74; 1399709#L2498-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1399698#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1399697#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1399696#L2694-3 assume !(1 == ~currentHeading~0); 1399693#L2704-9 assume !(0 == ~currentFloorID~0); 1390498#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1390494#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1390493#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1390492#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1390487#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1395851#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1390482#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1390472#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1390471#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1390464#L947-2 assume !false; 1369061#L948 [2018-11-28 12:53:07,693 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:07,694 INFO L82 PathProgramCache]: Analyzing trace with hash -2141403484, now seen corresponding path program 4 times [2018-11-28 12:53:07,694 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:07,694 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:07,694 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:07,694 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:07,694 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:07,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:07,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:07,774 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:07,774 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:07,774 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:07,775 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:07,775 INFO L82 PathProgramCache]: Analyzing trace with hash 663686534, now seen corresponding path program 1 times [2018-11-28 12:53:07,775 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:07,775 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:07,775 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:07,776 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:07,776 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:07,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:07,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:07,834 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:07,834 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 12:53:07,834 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:07,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 12:53:07,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 12:53:07,835 INFO L87 Difference]: Start difference. First operand 82125 states and 152470 transitions. cyclomatic complexity: 70349 Second operand 7 states. [2018-11-28 12:53:08,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:08,903 INFO L93 Difference]: Finished difference Result 115549 states and 214268 transitions. [2018-11-28 12:53:08,903 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-28 12:53:08,904 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 115549 states and 214268 transitions. [2018-11-28 12:53:09,306 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 68388 [2018-11-28 12:53:09,614 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 115549 states to 115549 states and 214268 transitions. [2018-11-28 12:53:09,614 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 77761 [2018-11-28 12:53:09,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 77761 [2018-11-28 12:53:09,672 INFO L73 IsDeterministic]: Start isDeterministic. Operand 115549 states and 214268 transitions. [2018-11-28 12:53:09,675 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:09,676 INFO L705 BuchiCegarLoop]: Abstraction has 115549 states and 214268 transitions. [2018-11-28 12:53:09,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115549 states and 214268 transitions. [2018-11-28 12:53:10,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115549 to 47855. [2018-11-28 12:53:10,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47855 states. [2018-11-28 12:53:10,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47855 states to 47855 states and 88794 transitions. [2018-11-28 12:53:10,337 INFO L728 BuchiCegarLoop]: Abstraction has 47855 states and 88794 transitions. [2018-11-28 12:53:10,337 INFO L608 BuchiCegarLoop]: Abstraction has 47855 states and 88794 transitions. [2018-11-28 12:53:10,338 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-28 12:53:10,338 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47855 states and 88794 transitions. [2018-11-28 12:53:10,439 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26936 [2018-11-28 12:53:10,439 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:10,439 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:10,440 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:10,440 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:10,441 INFO L794 eck$LassoCheckResult]: Stem: 1551769#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1551770#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1553180#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1553181#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1553511#L1143 assume 0 != main_~tmp~14; 1553512#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1553816#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1552908#L250 assume !(0 == getOrigin_~person); 1552457#L254 assume !(1 == getOrigin_~person); 1552373#L258 assume !(2 == getOrigin_~person); 1552374#L262 assume !(3 == getOrigin_~person); 1553240#L266 assume !(4 == getOrigin_~person); 1553150#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1553151#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1550858#L1525 assume !(0 == initPersonOnFloor_~floor); 1550859#L1552 assume 1 == initPersonOnFloor_~floor; 1554069#L1553 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 1550423#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1553104#L1317 assume !(0 == callOnFloor_~floorID); 1553469#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1553470#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1554339#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1554338#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1554337#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1551908#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1551909#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1552316#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1553077#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1554336#L2875 assume !(0 != timeShift_~tmp___9~2); 1553818#L2966 assume !(1 == ~doorState~0); 1553819#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1550813#L2318 assume !(1 == stopRequestedInDirection_~dir); 1550814#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1551608#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1551006#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1551007#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1551999#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1554340#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1551611#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1550579#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1552848#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1552849#L2694-2 assume !(1 == ~currentHeading~0); 1551905#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1551906#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1556410#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1556409#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1556408#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1556403#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1556401#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1556397#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1556387#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1556386#L112-1 cleanup_~i~2 := 0; 1556384#L947-2 assume !false; 1556385#L948 [2018-11-28 12:53:10,441 INFO L796 eck$LassoCheckResult]: Loop: 1556385#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1571992#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1571991#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1571989#L955 assume 1 != cleanup_~tmp___0~3; 1571990#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1571983#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1571984#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1571975#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1571976#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1571965#L1254-22 assume !(0 == isFloorCalling_~floorID); 1571966#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1571956#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1571957#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1572373#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1572374#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1572355#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1572356#L1254-26 assume !(0 == isFloorCalling_~floorID); 1573220#L1258-26 assume !(1 == isFloorCalling_~floorID); 1573217#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1572701#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1572545#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1572507#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1572450#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1572404#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1572393#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1572382#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1572372#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1572365#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1572349#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1572178#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1572174#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1572166#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1572158#L2322-2 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1572159#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1572381#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1572371#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1572364#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1572361#L2318-3 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1572359#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1572347#L2322-3 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1572348#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1578659#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1578628#L2694-5 assume !(1 == ~currentHeading~0); 1578618#L2704-15 assume !(0 == ~currentFloorID~0); 1578610#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1576375#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1572023#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1576369#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1576359#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1576237#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1572005#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1571995#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1571994#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1571993#L947-2 assume !false; 1556385#L948 [2018-11-28 12:53:10,441 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:10,441 INFO L82 PathProgramCache]: Analyzing trace with hash -2141403484, now seen corresponding path program 5 times [2018-11-28 12:53:10,441 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:10,442 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:10,442 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:10,443 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:10,443 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:10,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:10,499 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:10,499 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:10,499 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:10,500 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:10,500 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:10,500 INFO L82 PathProgramCache]: Analyzing trace with hash -1936387114, now seen corresponding path program 1 times [2018-11-28 12:53:10,500 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:10,500 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:10,501 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:10,501 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:10,501 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:10,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:10,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:10,536 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:10,536 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:10,537 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:10,537 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:10,537 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:10,537 INFO L87 Difference]: Start difference. First operand 47855 states and 88794 transitions. cyclomatic complexity: 40945 Second operand 4 states. [2018-11-28 12:53:10,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:10,694 INFO L93 Difference]: Finished difference Result 47855 states and 88790 transitions. [2018-11-28 12:53:10,695 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:10,695 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47855 states and 88790 transitions. [2018-11-28 12:53:10,834 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26936 [2018-11-28 12:53:10,930 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47855 states to 47855 states and 88790 transitions. [2018-11-28 12:53:10,931 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32769 [2018-11-28 12:53:10,950 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32769 [2018-11-28 12:53:10,950 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47855 states and 88790 transitions. [2018-11-28 12:53:10,957 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:10,957 INFO L705 BuchiCegarLoop]: Abstraction has 47855 states and 88790 transitions. [2018-11-28 12:53:10,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47855 states and 88790 transitions. [2018-11-28 12:53:11,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47855 to 47855. [2018-11-28 12:53:11,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47855 states. [2018-11-28 12:53:11,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47855 states to 47855 states and 88790 transitions. [2018-11-28 12:53:11,353 INFO L728 BuchiCegarLoop]: Abstraction has 47855 states and 88790 transitions. [2018-11-28 12:53:11,353 INFO L608 BuchiCegarLoop]: Abstraction has 47855 states and 88790 transitions. [2018-11-28 12:53:11,353 INFO L442 BuchiCegarLoop]: ======== Iteration 19============ [2018-11-28 12:53:11,353 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47855 states and 88790 transitions. [2018-11-28 12:53:11,454 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26936 [2018-11-28 12:53:11,455 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:11,455 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:11,456 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:11,456 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:11,456 INFO L794 eck$LassoCheckResult]: Stem: 1647493#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1647494#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1648903#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1648904#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1649233#L1143 assume 0 != main_~tmp~14; 1649234#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1649544#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1648630#L250 assume !(0 == getOrigin_~person); 1648170#L254 assume !(1 == getOrigin_~person); 1648090#L258 assume !(2 == getOrigin_~person); 1648091#L262 assume !(3 == getOrigin_~person); 1648954#L266 assume !(4 == getOrigin_~person); 1648878#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1648879#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1646583#L1525 assume !(0 == initPersonOnFloor_~floor); 1646584#L1552 assume 1 == initPersonOnFloor_~floor; 1649807#L1553 assume !(0 == initPersonOnFloor_~person); 1649572#L1556 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 1646145#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1648832#L1317 assume !(0 == callOnFloor_~floorID); 1649191#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1649192#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1650086#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1650085#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1650084#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1647628#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1647629#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1648030#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1648805#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1650081#L2875 assume !(0 != timeShift_~tmp___9~2); 1649546#L2966 assume !(1 == ~doorState~0); 1649525#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1646535#L2318 assume !(1 == stopRequestedInDirection_~dir); 1646536#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1647335#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1646728#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1646729#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1647720#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1650080#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1647337#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1646307#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1648569#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1648570#L2694-2 assume !(1 == ~currentHeading~0); 1650071#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1647614#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1647615#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1667081#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1667080#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1667075#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1667082#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1667070#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1667060#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1667059#L112-1 cleanup_~i~2 := 0; 1657794#L947-2 assume !false; 1657795#L948 [2018-11-28 12:53:11,457 INFO L796 eck$LassoCheckResult]: Loop: 1657795#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1668130#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1668128#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1668126#L955 assume 1 != cleanup_~tmp___0~3; 1668124#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1668122#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1668120#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1668118#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1668113#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1668111#L1254-22 assume !(0 == isFloorCalling_~floorID); 1668110#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1668108#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1668107#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1668106#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1668105#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1668104#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1668101#L1254-26 assume !(0 == isFloorCalling_~floorID); 1668103#L1258-26 assume !(1 == isFloorCalling_~floorID); 1668088#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1668083#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1668082#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1668081#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1668080#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1668079#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1668073#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1668070#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1668067#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1668064#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1668061#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1668060#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1667836#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1647433#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1647434#L2322-2 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1668203#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1669783#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1668195#L2749-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1669779#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1669777#L2318-3 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1669778#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 1682342#L2322-3 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1646359#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1648576#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1648577#L2694-5 assume !(1 == ~currentHeading~0); 1668189#L2704-15 assume !(0 == ~currentFloorID~0); 1668175#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1668171#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1668170#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1668169#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1668164#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1668174#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1668146#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1668136#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1668134#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1668132#L947-2 assume !false; 1657795#L948 [2018-11-28 12:53:11,457 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:11,457 INFO L82 PathProgramCache]: Analyzing trace with hash 1742683817, now seen corresponding path program 1 times [2018-11-28 12:53:11,457 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:11,457 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:11,458 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:11,458 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:11,458 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:11,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:11,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:11,522 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:11,523 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:11,523 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:11,523 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:11,523 INFO L82 PathProgramCache]: Analyzing trace with hash -1936387114, now seen corresponding path program 2 times [2018-11-28 12:53:11,523 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:11,523 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:11,524 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:11,524 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:11,524 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:11,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:11,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:11,571 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:11,571 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:11,571 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:11,571 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:53:11,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:53:11,572 INFO L87 Difference]: Start difference. First operand 47855 states and 88790 transitions. cyclomatic complexity: 40941 Second operand 5 states. [2018-11-28 12:53:13,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:13,431 INFO L93 Difference]: Finished difference Result 162345 states and 300062 transitions. [2018-11-28 12:53:13,432 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:53:13,432 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 162345 states and 300062 transitions. [2018-11-28 12:53:13,899 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 100976 [2018-11-28 12:53:14,251 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 162345 states to 162345 states and 300062 transitions. [2018-11-28 12:53:14,251 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108963 [2018-11-28 12:53:14,315 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108963 [2018-11-28 12:53:14,315 INFO L73 IsDeterministic]: Start isDeterministic. Operand 162345 states and 300062 transitions. [2018-11-28 12:53:14,332 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:14,333 INFO L705 BuchiCegarLoop]: Abstraction has 162345 states and 300062 transitions. [2018-11-28 12:53:14,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162345 states and 300062 transitions. [2018-11-28 12:53:14,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162345 to 47855. [2018-11-28 12:53:14,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47855 states. [2018-11-28 12:53:14,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47855 states to 47855 states and 88762 transitions. [2018-11-28 12:53:14,966 INFO L728 BuchiCegarLoop]: Abstraction has 47855 states and 88762 transitions. [2018-11-28 12:53:14,967 INFO L608 BuchiCegarLoop]: Abstraction has 47855 states and 88762 transitions. [2018-11-28 12:53:14,967 INFO L442 BuchiCegarLoop]: ======== Iteration 20============ [2018-11-28 12:53:14,967 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47855 states and 88762 transitions. [2018-11-28 12:53:15,052 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26936 [2018-11-28 12:53:15,052 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:15,052 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:15,053 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:15,053 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:15,053 INFO L794 eck$LassoCheckResult]: Stem: 1857733#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1857734#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1859162#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1859163#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1859498#L1143 assume 0 != main_~tmp~14; 1859499#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1859833#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1858884#L250 assume !(0 == getOrigin_~person); 1858421#L254 assume !(1 == getOrigin_~person); 1858344#L258 assume !(2 == getOrigin_~person); 1858345#L262 assume !(3 == getOrigin_~person); 1859222#L266 assume !(4 == getOrigin_~person); 1859128#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1859129#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1856806#L1525 assume !(0 == initPersonOnFloor_~floor); 1856807#L1552 assume 1 == initPersonOnFloor_~floor; 1860100#L1553 assume !(0 == initPersonOnFloor_~person); 1859863#L1556 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 1856367#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1859084#L1317 assume !(0 == callOnFloor_~floorID); 1859457#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1859458#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1863584#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1863583#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1863579#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1863580#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1863582#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1863581#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1863578#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1863574#L2875 assume !(0 != timeShift_~tmp___9~2); 1863575#L2966 assume !(1 == ~doorState~0); 1859808#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1859809#L2318 assume !(1 == stopRequestedInDirection_~dir); 1857567#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1857568#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1856951#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1856952#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1876225#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1860402#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1857570#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1856523#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1858821#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1858823#L2694-2 assume !(1 == ~currentHeading~0); 1857869#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1857859#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1856920#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1856921#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1859563#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1857504#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1858957#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1860112#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1857474#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1856443#L112-1 cleanup_~i~2 := 0; 1876556#L947-2 assume !false; 1876557#L948 [2018-11-28 12:53:15,053 INFO L796 eck$LassoCheckResult]: Loop: 1876557#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1903666#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1903664#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1858878#L955 assume 1 != cleanup_~tmp___0~3; 1858879#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1903472#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1903471#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1903470#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1903469#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1857783#L1254-22 assume !(0 == isFloorCalling_~floorID); 1857784#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1858929#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1858699#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1858700#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1902699#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1902657#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1902656#L1254-26 assume !(0 == isFloorCalling_~floorID); 1892621#L1258-26 assume !(1 == isFloorCalling_~floorID); 1892622#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1902143#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1902138#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1902139#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1902149#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1902146#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1902142#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1902140#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1902141#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1902129#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1902130#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1903512#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1877885#L2318-2 assume !(1 == stopRequestedInDirection_~dir); 1877886#L2487-2 assume !(0 == ~currentFloorID~0); 1903588#L2493-2 assume ~currentFloorID~0 > 0; 1903586#L2494-2 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1903584#L2508-2 assume ~currentFloorID~0 > 0; 1859631#L2510-2 assume !(0 != stopRequestedInDirection_~respectInLiftCalls); 1859633#L2521-2 assume !(~currentFloorID~0 > 1); 1903721#L2537-2 assume ~currentFloorID~0 > 1; 1903776#L2539-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1903734#L2540-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1903715#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1903713#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1903710#L2694-3 assume !(1 == ~currentHeading~0); 1903703#L2704-9 assume !(0 == ~currentFloorID~0); 1903697#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1903694#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1903693#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1903692#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1903687#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1903685#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1903681#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1903671#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1903669#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1903667#L947-2 assume !false; 1876557#L948 [2018-11-28 12:53:15,053 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:15,053 INFO L82 PathProgramCache]: Analyzing trace with hash 1742683817, now seen corresponding path program 2 times [2018-11-28 12:53:15,054 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:15,054 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:15,054 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:15,054 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:15,054 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:15,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:15,097 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:15,097 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:15,097 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:15,098 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:15,098 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:15,098 INFO L82 PathProgramCache]: Analyzing trace with hash -1549052782, now seen corresponding path program 1 times [2018-11-28 12:53:15,098 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:15,098 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:15,098 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:15,098 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:15,098 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:15,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:15,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:15,137 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:15,138 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:15,138 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:15,138 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:15,138 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:15,138 INFO L87 Difference]: Start difference. First operand 47855 states and 88762 transitions. cyclomatic complexity: 40913 Second operand 4 states. [2018-11-28 12:53:15,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:15,491 INFO L93 Difference]: Finished difference Result 58955 states and 108044 transitions. [2018-11-28 12:53:15,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:53:15,492 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58955 states and 108044 transitions. [2018-11-28 12:53:15,654 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 32301 [2018-11-28 12:53:15,775 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58955 states to 58955 states and 108044 transitions. [2018-11-28 12:53:15,775 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38868 [2018-11-28 12:53:15,798 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38868 [2018-11-28 12:53:15,798 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58955 states and 108044 transitions. [2018-11-28 12:53:15,799 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:15,799 INFO L705 BuchiCegarLoop]: Abstraction has 58955 states and 108044 transitions. [2018-11-28 12:53:15,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58955 states and 108044 transitions. [2018-11-28 12:53:16,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58955 to 47855. [2018-11-28 12:53:16,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47855 states. [2018-11-28 12:53:16,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47855 states to 47855 states and 88410 transitions. [2018-11-28 12:53:16,145 INFO L728 BuchiCegarLoop]: Abstraction has 47855 states and 88410 transitions. [2018-11-28 12:53:16,145 INFO L608 BuchiCegarLoop]: Abstraction has 47855 states and 88410 transitions. [2018-11-28 12:53:16,145 INFO L442 BuchiCegarLoop]: ======== Iteration 21============ [2018-11-28 12:53:16,145 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47855 states and 88410 transitions. [2018-11-28 12:53:16,231 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 26936 [2018-11-28 12:53:16,231 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:16,231 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:16,232 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:16,232 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:16,232 INFO L794 eck$LassoCheckResult]: Stem: 1964528#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 1964529#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 1965931#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1965932#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 1966250#L1143 assume 0 != main_~tmp~14; 1966251#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1966559#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1965663#L250 assume !(0 == getOrigin_~person); 1965201#L254 assume !(1 == getOrigin_~person); 1965117#L258 assume !(2 == getOrigin_~person); 1965118#L262 assume !(3 == getOrigin_~person); 1965985#L266 assume !(4 == getOrigin_~person); 1965904#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1965905#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1963618#L1525 assume !(0 == initPersonOnFloor_~floor); 1963619#L1552 assume 1 == initPersonOnFloor_~floor; 1966811#L1553 assume !(0 == initPersonOnFloor_~person); 1966586#L1556 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 1963189#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1965859#L1317 assume !(0 == callOnFloor_~floorID); 1966211#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1966212#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1973163#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1973162#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1973157#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1973158#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1973161#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1973159#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1973160#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1973153#L2875 assume !(0 != timeShift_~tmp___9~2); 1973154#L2966 assume !(1 == ~doorState~0); 1966537#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1966538#L2318 assume !(1 == stopRequestedInDirection_~dir); 1964364#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1964365#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 1963764#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1963765#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1964754#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1967094#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 1964368#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1963345#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1965598#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1965600#L2694-2 assume !(1 == ~currentHeading~0); 1964660#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1964652#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1963732#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1963733#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 1966312#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 1964304#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 1984447#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1982547#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1982537#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1982523#L112-1 cleanup_~i~2 := 0; 1982519#L947-2 assume !false; 1982520#L948 [2018-11-28 12:53:16,232 INFO L796 eck$LassoCheckResult]: Loop: 1982520#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1999902#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1999901#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 1999883#L955 assume 1 != cleanup_~tmp___0~3; 1999884#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1999450#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1999451#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 1999441#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 1999442#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1999435#L1254-22 assume !(0 == isFloorCalling_~floorID); 1999431#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1999428#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 1999424#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1999415#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1999413#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 1999410#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 1999411#L1254-26 assume !(0 == isFloorCalling_~floorID); 1993747#L1258-26 assume !(1 == isFloorCalling_~floorID); 1984713#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 1984710#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 1984709#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1984708#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1984707#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 1984695#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1984623#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 1984616#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1984609#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 1984602#L2875-1 assume !(0 != timeShift_~tmp___9~2); 1984604#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1999840#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1999838#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 1999839#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2008752#L2322-2 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2008625#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2008876#L2974-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2008614#L2749-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2008875#L2754-2 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2008831#L2318-3 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2008829#L1828-7 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2008806#L2322-3 assume 0 != stopRequestedInDirection_~tmp~20;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2008777#L2640-3 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2008776#L2983-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2008774#L2694-5 assume !(1 == ~currentHeading~0); 2008773#L2704-15 assume !(0 == ~currentFloorID~0); 2008602#L2704-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2008588#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2008587#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2008586#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2008577#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2008524#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 1999943#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 1999933#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 1999932#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 1999931#L947-2 assume !false; 1982520#L948 [2018-11-28 12:53:16,232 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:16,233 INFO L82 PathProgramCache]: Analyzing trace with hash 1742683817, now seen corresponding path program 3 times [2018-11-28 12:53:16,233 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:16,233 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:16,233 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:16,233 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:16,234 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:16,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:16,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:16,281 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:16,281 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:16,281 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:16,281 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:16,281 INFO L82 PathProgramCache]: Analyzing trace with hash -247443372, now seen corresponding path program 1 times [2018-11-28 12:53:16,281 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:16,282 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:16,282 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:16,282 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:16,282 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:16,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:16,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:16,313 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:16,313 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 12:53:16,313 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:16,314 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:53:16,314 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:53:16,314 INFO L87 Difference]: Start difference. First operand 47855 states and 88410 transitions. cyclomatic complexity: 40561 Second operand 6 states. [2018-11-28 12:53:17,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:17,671 INFO L93 Difference]: Finished difference Result 257507 states and 476354 transitions. [2018-11-28 12:53:17,671 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-28 12:53:17,671 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 257507 states and 476354 transitions. [2018-11-28 12:53:18,824 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 170530 [2018-11-28 12:53:19,312 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 257507 states to 257507 states and 476354 transitions. [2018-11-28 12:53:19,312 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 180257 [2018-11-28 12:53:19,392 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 180257 [2018-11-28 12:53:19,392 INFO L73 IsDeterministic]: Start isDeterministic. Operand 257507 states and 476354 transitions. [2018-11-28 12:53:19,460 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:19,460 INFO L705 BuchiCegarLoop]: Abstraction has 257507 states and 476354 transitions. [2018-11-28 12:53:19,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257507 states and 476354 transitions. [2018-11-28 12:53:20,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257507 to 83831. [2018-11-28 12:53:20,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83831 states. [2018-11-28 12:53:20,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83831 states to 83831 states and 155288 transitions. [2018-11-28 12:53:20,510 INFO L728 BuchiCegarLoop]: Abstraction has 83831 states and 155288 transitions. [2018-11-28 12:53:20,510 INFO L608 BuchiCegarLoop]: Abstraction has 83831 states and 155288 transitions. [2018-11-28 12:53:20,510 INFO L442 BuchiCegarLoop]: ======== Iteration 22============ [2018-11-28 12:53:20,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 83831 states and 155288 transitions. [2018-11-28 12:53:20,660 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 50077 [2018-11-28 12:53:20,660 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:20,660 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:20,661 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:20,661 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:20,661 INFO L794 eck$LassoCheckResult]: Stem: 2269925#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 2269926#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 2271349#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2271350#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2271684#L1143 assume 0 != main_~tmp~14; 2271685#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2272004#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2271065#L250 assume !(0 == getOrigin_~person); 2270592#L254 assume !(1 == getOrigin_~person); 2270525#L258 assume !(2 == getOrigin_~person); 2270526#L262 assume !(3 == getOrigin_~person); 2271411#L266 assume !(4 == getOrigin_~person); 2271312#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2271313#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2269015#L1525 assume !(0 == initPersonOnFloor_~floor); 2269016#L1552 assume 1 == initPersonOnFloor_~floor; 2272307#L1553 assume !(0 == initPersonOnFloor_~person); 2272040#L1556 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 2268595#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2271267#L1317 assume !(0 == callOnFloor_~floorID); 2271641#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2271642#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2272616#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2272617#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2272611#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2272613#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2270463#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2270464#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2272609#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2272610#L2875 assume !(0 != timeShift_~tmp___9~2); 2272008#L2966 assume !(1 == ~doorState~0); 2272009#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2268971#L2318 assume !(1 == stopRequestedInDirection_~dir); 2268972#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2270432#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2271954#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2272621#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2274683#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2274677#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2269760#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2269761#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2270994#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2270996#L2694-2 assume !(1 == ~currentHeading~0); 2274667#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2270052#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2269121#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2269122#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2288365#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2288360#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2288358#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2288354#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2288344#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2288343#L112-1 cleanup_~i~2 := 0; 2288340#L947-2 assume !false; 2288341#L948 [2018-11-28 12:53:20,661 INFO L796 eck$LassoCheckResult]: Loop: 2288341#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2351849#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2351844#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2351837#L955 assume 1 != cleanup_~tmp___0~3; 2351681#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2351477#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2351478#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2351473#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2351474#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2351675#L1254-22 assume !(0 == isFloorCalling_~floorID); 2351674#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2351673#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2351672#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2338967#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2351671#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2351577#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2351574#L1254-26 assume !(0 == isFloorCalling_~floorID); 2323328#L1258-26 assume !(1 == isFloorCalling_~floorID); 2322686#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2322683#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2322679#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2322680#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2322694#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2322693#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2322690#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2322681#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2322647#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2322644#L2875-1 assume !(0 != timeShift_~tmp___9~2); 2321479#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2271995#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2268988#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2268990#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2302001#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 2319181#L2328-2 assume !(~currentFloorID~0 < 0); 2319222#L2343-2 assume !(~currentFloorID~0 < 0); 2319221#L2356-2 assume !(~currentFloorID~0 < 1); 2319220#L2372-2 assume !(~currentFloorID~0 < 1); 2319218#L2385-2 assume !(~currentFloorID~0 < 2); 2319177#L2401-2 assume ~currentFloorID~0 < 2; 2319215#L2403-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2319162#L2404-2 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2318821#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2318822#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2352355#L2694-3 assume !(1 == ~currentHeading~0); 2352351#L2704-9 assume !(0 == ~currentFloorID~0); 2352348#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2352342#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2352340#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2352338#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2352333#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2352339#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2351901#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2351891#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2351890#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 2351850#L947-2 assume !false; 2288341#L948 [2018-11-28 12:53:20,661 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:20,661 INFO L82 PathProgramCache]: Analyzing trace with hash 1742683817, now seen corresponding path program 4 times [2018-11-28 12:53:20,661 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:20,662 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:20,662 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:20,662 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:20,662 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:20,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:20,710 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:20,710 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:20,710 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:20,710 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:20,711 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:20,711 INFO L82 PathProgramCache]: Analyzing trace with hash 42330, now seen corresponding path program 1 times [2018-11-28 12:53:20,711 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:20,711 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:20,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:20,711 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:20,712 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:20,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:20,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:20,745 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:20,745 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:20,745 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:20,746 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:20,746 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:20,746 INFO L87 Difference]: Start difference. First operand 83831 states and 155288 transitions. cyclomatic complexity: 71469 Second operand 4 states. [2018-11-28 12:53:20,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:20,971 INFO L93 Difference]: Finished difference Result 83831 states and 155284 transitions. [2018-11-28 12:53:20,971 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:20,971 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 83831 states and 155284 transitions. [2018-11-28 12:53:21,202 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 50077 [2018-11-28 12:53:21,375 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 83831 states to 83831 states and 155284 transitions. [2018-11-28 12:53:21,375 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56767 [2018-11-28 12:53:21,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56767 [2018-11-28 12:53:21,409 INFO L73 IsDeterministic]: Start isDeterministic. Operand 83831 states and 155284 transitions. [2018-11-28 12:53:21,413 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:21,413 INFO L705 BuchiCegarLoop]: Abstraction has 83831 states and 155284 transitions. [2018-11-28 12:53:21,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83831 states and 155284 transitions. [2018-11-28 12:53:21,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83831 to 83831. [2018-11-28 12:53:21,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83831 states. [2018-11-28 12:53:21,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83831 states to 83831 states and 155284 transitions. [2018-11-28 12:53:21,971 INFO L728 BuchiCegarLoop]: Abstraction has 83831 states and 155284 transitions. [2018-11-28 12:53:21,971 INFO L608 BuchiCegarLoop]: Abstraction has 83831 states and 155284 transitions. [2018-11-28 12:53:21,971 INFO L442 BuchiCegarLoop]: ======== Iteration 23============ [2018-11-28 12:53:21,971 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 83831 states and 155284 transitions. [2018-11-28 12:53:22,124 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 50077 [2018-11-28 12:53:22,124 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:22,124 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:22,124 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:22,124 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:22,125 INFO L794 eck$LassoCheckResult]: Stem: 2437566#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 2437567#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 2438945#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2438946#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2439261#L1143 assume 0 != main_~tmp~14; 2439262#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2439575#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2438679#L250 assume !(0 == getOrigin_~person); 2438219#L254 assume !(1 == getOrigin_~person); 2438149#L258 assume !(2 == getOrigin_~person); 2438150#L262 assume !(3 == getOrigin_~person); 2438993#L266 assume !(4 == getOrigin_~person); 2438920#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2438921#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2436686#L1525 assume !(0 == initPersonOnFloor_~floor); 2436687#L1552 assume 1 == initPersonOnFloor_~floor; 2439837#L1553 assume !(0 == initPersonOnFloor_~person); 2439605#L1556 assume !(1 == initPersonOnFloor_~person); 2437688#L1559 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 2436269#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2438871#L1317 assume !(0 == callOnFloor_~floorID); 2439220#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2439221#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2440435#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2440434#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2440433#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2440432#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2440431#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2440430#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2440429#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2440428#L2875 assume !(0 != timeShift_~tmp___9~2); 2440427#L2966 assume !(1 == ~doorState~0); 2440426#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2440418#L2318 assume !(1 == stopRequestedInDirection_~dir); 2437415#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2437416#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2436824#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2436825#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2436802#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2436655#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2436656#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2437418#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2438605#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2438607#L2694-2 assume !(1 == ~currentHeading~0); 2440308#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2437681#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2437682#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2458374#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2458373#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2458368#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2458375#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2458363#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2458353#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2458352#L112-1 cleanup_~i~2 := 0; 2458330#L947-2 assume !false; 2458331#L948 [2018-11-28 12:53:22,125 INFO L796 eck$LassoCheckResult]: Loop: 2458331#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2489285#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2489283#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2489281#L955 assume 1 != cleanup_~tmp___0~3; 2489279#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2489277#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2489275#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2489273#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2489268#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2489270#L1254-22 assume !(0 == isFloorCalling_~floorID); 2489945#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2489944#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2489259#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2489258#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2489257#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2489256#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2489252#L1254-26 assume !(0 == isFloorCalling_~floorID); 2489254#L1258-26 assume !(1 == isFloorCalling_~floorID); 2489244#L1262-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2489241#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2489240#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2489239#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2489238#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2489237#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2489234#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2489232#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2489231#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2489229#L2875-1 assume !(0 != timeShift_~tmp___9~2); 2489228#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2489227#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2489226#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2436663#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2438454#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 2438456#L2328-2 assume !(~currentFloorID~0 < 0); 2469487#L2343-2 assume !(~currentFloorID~0 < 0); 2496123#L2356-2 assume !(~currentFloorID~0 < 1); 2496121#L2372-2 assume !(~currentFloorID~0 < 1); 2496119#L2385-2 assume !(~currentFloorID~0 < 2); 2496061#L2401-2 assume ~currentFloorID~0 < 2; 2496079#L2403-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2496047#L2404-2 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2496044#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2496043#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2496041#L2694-3 assume !(1 == ~currentHeading~0); 2496039#L2704-9 assume !(0 == ~currentFloorID~0); 2489340#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2489336#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2489330#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2489325#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2489318#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2489317#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2489301#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2489291#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2489289#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 2489287#L947-2 assume !false; 2458331#L948 [2018-11-28 12:53:22,125 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:22,125 INFO L82 PathProgramCache]: Analyzing trace with hash -755832631, now seen corresponding path program 1 times [2018-11-28 12:53:22,125 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:22,126 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:22,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:22,126 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:22,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:22,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:22,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:22,160 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:22,160 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:22,161 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:22,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:22,161 INFO L82 PathProgramCache]: Analyzing trace with hash 42330, now seen corresponding path program 2 times [2018-11-28 12:53:22,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:22,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:22,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:22,162 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:22,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:22,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:22,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:22,212 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:22,212 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:22,212 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:22,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:53:22,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:53:22,212 INFO L87 Difference]: Start difference. First operand 83831 states and 155284 transitions. cyclomatic complexity: 71465 Second operand 5 states. [2018-11-28 12:53:23,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:23,354 INFO L93 Difference]: Finished difference Result 158982 states and 293068 transitions. [2018-11-28 12:53:23,354 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-28 12:53:23,355 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 158982 states and 293068 transitions. [2018-11-28 12:53:23,790 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 99217 [2018-11-28 12:53:24,070 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 158982 states to 133971 states and 246864 transitions. [2018-11-28 12:53:24,070 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 107073 [2018-11-28 12:53:24,132 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 107073 [2018-11-28 12:53:24,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 133971 states and 246864 transitions. [2018-11-28 12:53:24,157 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:24,157 INFO L705 BuchiCegarLoop]: Abstraction has 133971 states and 246864 transitions. [2018-11-28 12:53:24,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133971 states and 246864 transitions. [2018-11-28 12:53:24,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133971 to 106828. [2018-11-28 12:53:24,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106828 states. [2018-11-28 12:53:24,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106828 states to 106828 states and 197714 transitions. [2018-11-28 12:53:24,981 INFO L728 BuchiCegarLoop]: Abstraction has 106828 states and 197714 transitions. [2018-11-28 12:53:24,981 INFO L608 BuchiCegarLoop]: Abstraction has 106828 states and 197714 transitions. [2018-11-28 12:53:24,981 INFO L442 BuchiCegarLoop]: ======== Iteration 24============ [2018-11-28 12:53:24,981 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106828 states and 197714 transitions. [2018-11-28 12:53:25,185 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:25,185 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:25,185 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:25,186 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:25,186 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:25,186 INFO L794 eck$LassoCheckResult]: Stem: 2680389#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 2680390#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 2681765#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2681766#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2682103#L1143 assume 0 != main_~tmp~14; 2682104#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2682434#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2681497#L250 assume !(0 == getOrigin_~person); 2681041#L254 assume !(1 == getOrigin_~person); 2680970#L258 assume !(2 == getOrigin_~person); 2680971#L262 assume !(3 == getOrigin_~person); 2681821#L266 assume !(4 == getOrigin_~person); 2681740#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2681741#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2679491#L1525 assume !(0 == initPersonOnFloor_~floor); 2679492#L1552 assume 1 == initPersonOnFloor_~floor; 2682700#L1553 assume !(0 == initPersonOnFloor_~person); 2682464#L1556 assume !(1 == initPersonOnFloor_~person); 2680512#L1559 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 2679095#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2681694#L1317 assume !(0 == callOnFloor_~floorID); 2682064#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2682065#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2683701#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2683700#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2683699#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2683698#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2683697#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2683696#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2683695#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2683694#L2875 assume !(0 != timeShift_~tmp___9~2); 2683693#L2966 assume !(1 == ~doorState~0); 2683692#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2683691#L2318 assume !(1 == stopRequestedInDirection_~dir); 2680235#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2680236#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2679624#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2679625#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2679601#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2679602#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2680238#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2680239#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2681442#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2681444#L2694-2 assume !(1 == ~currentHeading~0); 2680516#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2680517#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2680506#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2686791#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2686789#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2686781#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2686778#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2686769#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2686758#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2686759#L112-1 cleanup_~i~2 := 0; 2686674#L947-2 assume !false; 2686675#L948 [2018-11-28 12:53:25,186 INFO L796 eck$LassoCheckResult]: Loop: 2686675#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2769556#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2769555#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2769554#L955 assume 1 != cleanup_~tmp___0~3; 2769553#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2769552#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2740546#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2740480#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2740481#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2740534#L1254-22 assume !(0 == isFloorCalling_~floorID); 2764294#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2764271#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2764272#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2740229#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2740230#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2740222#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2740223#L1254-26 assume !(0 == isFloorCalling_~floorID); 2758492#L1258-26 assume !(1 == isFloorCalling_~floorID); 2740214#L1262-26 assume !(2 == isFloorCalling_~floorID); 2740213#L1266-26 assume !(3 == isFloorCalling_~floorID); 2740211#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2740210#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2740209#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2740208#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2740207#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2740206#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2740203#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2740201#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2740200#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2740198#L2875-1 assume !(0 != timeShift_~tmp___9~2); 2740197#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2740196#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2740195#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2711859#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2760527#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 2760519#L2328-2 assume !(~currentFloorID~0 < 0); 2760516#L2343-2 assume !(~currentFloorID~0 < 0); 2760514#L2356-2 assume !(~currentFloorID~0 < 1); 2760513#L2372-2 assume !(~currentFloorID~0 < 1); 2760512#L2385-2 assume ~currentFloorID~0 < 2; 2760493#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2760390#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2760385#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2760297#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2760294#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2760291#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2760290#L2694-3 assume !(1 == ~currentHeading~0); 2760288#L2704-9 assume !(0 == ~currentFloorID~0); 2760251#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2760243#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2760144#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2769579#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2769574#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2769580#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2769569#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2769559#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2769558#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 2769557#L947-2 assume !false; 2686675#L948 [2018-11-28 12:53:25,186 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:25,187 INFO L82 PathProgramCache]: Analyzing trace with hash -755832631, now seen corresponding path program 2 times [2018-11-28 12:53:25,187 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:25,187 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:25,187 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:25,187 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:25,187 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:25,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:25,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:25,227 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:25,227 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:25,227 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:25,228 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:25,228 INFO L82 PathProgramCache]: Analyzing trace with hash 1733508177, now seen corresponding path program 1 times [2018-11-28 12:53:25,228 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:25,228 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:25,228 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:25,228 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:25,228 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:25,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:25,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:25,288 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:25,288 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:25,288 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:25,288 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:25,288 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:25,288 INFO L87 Difference]: Start difference. First operand 106828 states and 197714 transitions. cyclomatic complexity: 90899 Second operand 4 states. [2018-11-28 12:53:25,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:25,575 INFO L93 Difference]: Finished difference Result 106828 states and 197710 transitions. [2018-11-28 12:53:25,575 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:25,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106828 states and 197710 transitions. [2018-11-28 12:53:25,892 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:26,126 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106828 states to 106828 states and 197710 transitions. [2018-11-28 12:53:26,126 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80360 [2018-11-28 12:53:26,175 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80360 [2018-11-28 12:53:26,175 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106828 states and 197710 transitions. [2018-11-28 12:53:26,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:26,181 INFO L705 BuchiCegarLoop]: Abstraction has 106828 states and 197710 transitions. [2018-11-28 12:53:26,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106828 states and 197710 transitions. [2018-11-28 12:53:26,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106828 to 106828. [2018-11-28 12:53:26,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106828 states. [2018-11-28 12:53:26,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106828 states to 106828 states and 197710 transitions. [2018-11-28 12:53:26,929 INFO L728 BuchiCegarLoop]: Abstraction has 106828 states and 197710 transitions. [2018-11-28 12:53:26,929 INFO L608 BuchiCegarLoop]: Abstraction has 106828 states and 197710 transitions. [2018-11-28 12:53:26,929 INFO L442 BuchiCegarLoop]: ======== Iteration 25============ [2018-11-28 12:53:26,929 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106828 states and 197710 transitions. [2018-11-28 12:53:27,120 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:27,120 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:27,120 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:27,121 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:27,121 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:27,121 INFO L794 eck$LassoCheckResult]: Stem: 2894021#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 2894022#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 2895366#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2895367#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 2895666#L1143 assume 0 != main_~tmp~14; 2895667#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2895982#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2895105#L250 assume !(0 == getOrigin_~person); 2894659#L254 assume !(1 == getOrigin_~person); 2894590#L258 assume !(2 == getOrigin_~person); 2894591#L262 assume !(3 == getOrigin_~person); 2895405#L266 assume !(4 == getOrigin_~person); 2895347#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2895348#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2893155#L1525 assume !(0 == initPersonOnFloor_~floor); 2893156#L1552 assume !(1 == initPersonOnFloor_~floor); 2894271#L1579 assume !(2 == initPersonOnFloor_~floor); 2893882#L1606 assume !(3 == initPersonOnFloor_~floor); 2893884#L1633 assume !(4 == initPersonOnFloor_~floor); 2892763#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2895303#L1317 assume !(0 == callOnFloor_~floorID); 2895632#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2895633#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2896512#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2896511#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2896507#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2894150#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2894151#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2894537#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2898035#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2898034#L2875 assume !(0 != timeShift_~tmp___9~2); 2895984#L2966 assume !(1 == ~doorState~0); 2895961#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2893116#L2318 assume !(1 == stopRequestedInDirection_~dir); 2893117#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2895922#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2895923#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2894241#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2894242#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2893128#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 2893129#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2895920#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 2895921#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2896493#L2694-2 assume !(1 == ~currentHeading~0); 2896494#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2896697#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2896698#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2896686#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2896680#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2896674#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2902266#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2901967#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2901958#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2901956#L112-1 cleanup_~i~2 := 0; 2901953#L947-2 assume !false; 2901954#L948 [2018-11-28 12:53:27,121 INFO L796 eck$LassoCheckResult]: Loop: 2901954#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2950134#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2950132#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 2950130#L955 assume 1 != cleanup_~tmp___0~3; 2950128#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2950126#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2950124#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 2950122#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 2950119#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2950116#L1254-22 assume !(0 == isFloorCalling_~floorID); 2950113#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2950110#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 2950079#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2950078#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2950077#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 2950076#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2950073#L1254-26 assume !(0 == isFloorCalling_~floorID); 2950075#L1258-26 assume !(1 == isFloorCalling_~floorID); 2949904#L1262-26 assume !(2 == isFloorCalling_~floorID); 2949995#L1266-26 assume !(3 == isFloorCalling_~floorID); 2949994#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2949993#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 2949992#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2949991#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 2949990#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 2949989#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2949986#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 2949984#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2949983#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 2949981#L2875-1 assume !(0 != timeShift_~tmp___9~2); 2949980#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2949979#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2949978#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 2948511#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 2950034#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 2950030#L2328-2 assume !(~currentFloorID~0 < 0); 2950031#L2343-2 assume !(~currentFloorID~0 < 0); 2967301#L2356-2 assume !(~currentFloorID~0 < 1); 2967298#L2372-2 assume !(~currentFloorID~0 < 1); 2967296#L2385-2 assume ~currentFloorID~0 < 2; 2967295#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 2967291#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 2967286#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2967128#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2967115#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 2967112#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 2967108#L2694-3 assume !(1 == ~currentHeading~0); 2967109#L2704-9 assume !(0 == ~currentFloorID~0); 2967043#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2966393#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2965764#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 2950197#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 2950190#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 2950188#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 2950179#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 2950169#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 2950166#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 2950161#L947-2 assume !false; 2901954#L948 [2018-11-28 12:53:27,121 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:27,122 INFO L82 PathProgramCache]: Analyzing trace with hash 1067361609, now seen corresponding path program 1 times [2018-11-28 12:53:27,122 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:27,122 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:27,122 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:27,122 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:27,122 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:27,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:27,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:27,157 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:27,157 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:27,157 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:27,157 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:27,158 INFO L82 PathProgramCache]: Analyzing trace with hash 1733508177, now seen corresponding path program 2 times [2018-11-28 12:53:27,158 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:27,158 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:27,158 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:27,158 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:27,158 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:27,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:27,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:27,189 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:27,190 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:27,190 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:27,190 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:27,190 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:27,190 INFO L87 Difference]: Start difference. First operand 106828 states and 197710 transitions. cyclomatic complexity: 90895 Second operand 4 states. [2018-11-28 12:53:27,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:27,573 INFO L93 Difference]: Finished difference Result 106807 states and 197676 transitions. [2018-11-28 12:53:27,574 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:27,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106807 states and 197676 transitions. [2018-11-28 12:53:27,880 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:28,088 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106807 states to 106807 states and 197676 transitions. [2018-11-28 12:53:28,088 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80339 [2018-11-28 12:53:28,132 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80339 [2018-11-28 12:53:28,133 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106807 states and 197676 transitions. [2018-11-28 12:53:28,133 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:28,134 INFO L705 BuchiCegarLoop]: Abstraction has 106807 states and 197676 transitions. [2018-11-28 12:53:28,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106807 states and 197676 transitions. [2018-11-28 12:53:28,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106807 to 106807. [2018-11-28 12:53:28,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106807 states. [2018-11-28 12:53:28,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106807 states to 106807 states and 197676 transitions. [2018-11-28 12:53:28,811 INFO L728 BuchiCegarLoop]: Abstraction has 106807 states and 197676 transitions. [2018-11-28 12:53:28,811 INFO L608 BuchiCegarLoop]: Abstraction has 106807 states and 197676 transitions. [2018-11-28 12:53:28,811 INFO L442 BuchiCegarLoop]: ======== Iteration 26============ [2018-11-28 12:53:28,811 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106807 states and 197676 transitions. [2018-11-28 12:53:29,005 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:29,005 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:29,005 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:29,006 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:29,006 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:29,006 INFO L794 eck$LassoCheckResult]: Stem: 3107671#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 3107672#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 3109007#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3109008#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3109310#L1143 assume 0 != main_~tmp~14; 3109311#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3109617#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3108753#L250 assume !(0 == getOrigin_~person); 3108304#L254 assume !(1 == getOrigin_~person); 3108233#L258 assume !(2 == getOrigin_~person); 3108234#L262 assume !(3 == getOrigin_~person); 3109047#L266 assume !(4 == getOrigin_~person); 3108987#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3108988#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3106799#L1525 assume !(0 == initPersonOnFloor_~floor); 3106800#L1552 assume 1 == initPersonOnFloor_~floor; 3109876#L1553 assume !(0 == initPersonOnFloor_~person); 3109647#L1556 assume !(1 == initPersonOnFloor_~person); 3107794#L1559 assume !(2 == initPersonOnFloor_~person); 3107533#L1562 assume 3 == initPersonOnFloor_~person;~personOnFloor_3_1~0 := 1; 3106410#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3108941#L1317 assume !(0 == callOnFloor_~floorID); 3109277#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3109278#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3110144#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3110143#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3110142#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3107801#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3107802#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3108184#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3108916#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3110138#L2875 assume !(0 != timeShift_~tmp___9~2); 3109620#L2966 assume !(1 == ~doorState~0); 3109595#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3106762#L2318 assume !(1 == stopRequestedInDirection_~dir); 3106763#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3107528#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3106926#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3106927#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3106908#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3106774#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3106775#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3107530#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3109557#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3110121#L2694-2 assume !(1 == ~currentHeading~0); 3110122#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3107787#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3107788#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3128112#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3128111#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3128106#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3128113#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3128101#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3128091#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3128090#L112-1 cleanup_~i~2 := 0; 3128039#L947-2 assume !false; 3128040#L948 [2018-11-28 12:53:29,006 INFO L796 eck$LassoCheckResult]: Loop: 3128040#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3180666#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3180667#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3189895#L955 assume 1 != cleanup_~tmp___0~3; 3189893#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3189891#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3189889#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3189887#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3189884#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3189882#L1254-22 assume !(0 == isFloorCalling_~floorID); 3189880#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3189879#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3189877#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3163388#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3189875#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3189873#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3189870#L1254-26 assume !(0 == isFloorCalling_~floorID); 3189871#L1258-26 assume !(1 == isFloorCalling_~floorID); 3189864#L1262-26 assume !(2 == isFloorCalling_~floorID); 3189862#L1266-26 assume !(3 == isFloorCalling_~floorID); 3189860#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3189858#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3189855#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3189851#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 3189849#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 3189847#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3189843#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3189840#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3189838#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3189834#L2875-1 assume !(0 != timeShift_~tmp___9~2); 3189836#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3192112#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3192107#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3189825#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3189822#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 3189819#L2328-2 assume !(~currentFloorID~0 < 0); 3189816#L2343-2 assume !(~currentFloorID~0 < 0); 3189813#L2356-2 assume !(~currentFloorID~0 < 1); 3189810#L2372-2 assume !(~currentFloorID~0 < 1); 3189809#L2385-2 assume ~currentFloorID~0 < 2; 3189808#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3189806#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3189802#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3189771#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3189770#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3189767#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3189766#L2694-3 assume !(1 == ~currentHeading~0); 3189763#L2704-9 assume !(0 == ~currentFloorID~0); 3189757#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3189749#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3189745#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3192065#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3192058#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3192057#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3189723#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3189713#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3189712#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 3189711#L947-2 assume !false; 3128040#L948 [2018-11-28 12:53:29,006 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:29,006 INFO L82 PathProgramCache]: Analyzing trace with hash 748397614, now seen corresponding path program 1 times [2018-11-28 12:53:29,006 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:29,006 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:29,007 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:29,007 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:29,007 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:29,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:29,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:29,050 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:29,050 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:29,050 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:29,051 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:29,051 INFO L82 PathProgramCache]: Analyzing trace with hash 1733508177, now seen corresponding path program 3 times [2018-11-28 12:53:29,051 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:29,051 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:29,051 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:29,051 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:29,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:29,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:29,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:29,081 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:29,081 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:29,081 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:29,082 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:29,082 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:29,082 INFO L87 Difference]: Start difference. First operand 106807 states and 197676 transitions. cyclomatic complexity: 90882 Second operand 4 states. [2018-11-28 12:53:29,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:29,332 INFO L93 Difference]: Finished difference Result 106807 states and 197675 transitions. [2018-11-28 12:53:29,332 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:29,333 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106807 states and 197675 transitions. [2018-11-28 12:53:29,635 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:29,850 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106807 states to 106807 states and 197675 transitions. [2018-11-28 12:53:29,850 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80339 [2018-11-28 12:53:29,895 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80339 [2018-11-28 12:53:29,896 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106807 states and 197675 transitions. [2018-11-28 12:53:29,897 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:29,897 INFO L705 BuchiCegarLoop]: Abstraction has 106807 states and 197675 transitions. [2018-11-28 12:53:29,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106807 states and 197675 transitions. [2018-11-28 12:53:30,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106807 to 106807. [2018-11-28 12:53:30,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106807 states. [2018-11-28 12:53:30,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106807 states to 106807 states and 197675 transitions. [2018-11-28 12:53:30,573 INFO L728 BuchiCegarLoop]: Abstraction has 106807 states and 197675 transitions. [2018-11-28 12:53:30,573 INFO L608 BuchiCegarLoop]: Abstraction has 106807 states and 197675 transitions. [2018-11-28 12:53:30,573 INFO L442 BuchiCegarLoop]: ======== Iteration 27============ [2018-11-28 12:53:30,573 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106807 states and 197675 transitions. [2018-11-28 12:53:30,768 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:30,768 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:30,768 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:30,768 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:30,769 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:30,769 INFO L794 eck$LassoCheckResult]: Stem: 3321305#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 3321306#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 3322655#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3322656#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3322970#L1143 assume 0 != main_~tmp~14; 3322971#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3323286#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3322401#L250 assume !(0 == getOrigin_~person); 3321938#L254 assume !(1 == getOrigin_~person); 3321867#L258 assume !(2 == getOrigin_~person); 3321868#L262 assume !(3 == getOrigin_~person); 3322697#L266 assume !(4 == getOrigin_~person); 3322635#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3322636#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3320426#L1525 assume !(0 == initPersonOnFloor_~floor); 3320427#L1552 assume 1 == initPersonOnFloor_~floor; 3323545#L1553 assume !(0 == initPersonOnFloor_~person); 3323317#L1556 assume !(1 == initPersonOnFloor_~person); 3321431#L1559 assume !(2 == initPersonOnFloor_~person); 3321168#L1562 assume !(3 == initPersonOnFloor_~person); 3320524#L1565 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 3320036#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3322589#L1317 assume !(0 == callOnFloor_~floorID); 3322931#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3322932#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3323837#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3323836#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3323835#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3321438#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3321439#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3321820#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3322564#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3323831#L2875 assume !(0 != timeShift_~tmp___9~2); 3323289#L2966 assume !(1 == ~doorState~0); 3323265#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3320389#L2318 assume !(1 == stopRequestedInDirection_~dir); 3320390#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3321161#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3320557#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3320558#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3320538#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3320401#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3320402#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3321163#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3323229#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3323815#L2694-2 assume !(1 == ~currentHeading~0); 3323816#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3321423#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3321424#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3341142#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3340945#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3340855#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3341069#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3340830#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3340820#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3340806#L112-1 cleanup_~i~2 := 0; 3340802#L947-2 assume !false; 3340803#L948 [2018-11-28 12:53:30,769 INFO L796 eck$LassoCheckResult]: Loop: 3340803#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3411712#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3411710#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3411711#L955 assume 1 != cleanup_~tmp___0~3; 3411701#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3411699#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3411697#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3411698#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3415260#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3415259#L1254-22 assume !(0 == isFloorCalling_~floorID); 3415257#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3411689#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3411690#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3411680#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3411681#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3411676#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3411677#L1254-26 assume !(0 == isFloorCalling_~floorID); 3411674#L1258-26 assume !(1 == isFloorCalling_~floorID); 3390667#L1262-26 assume !(2 == isFloorCalling_~floorID); 3390664#L1266-26 assume !(3 == isFloorCalling_~floorID); 3390662#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3390660#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3390658#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3390656#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 3390653#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 3390650#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3390646#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3390643#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3390641#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3390638#L2875-1 assume !(0 != timeShift_~tmp___9~2); 3390634#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3390613#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3390611#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3376977#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3390589#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 3390590#L2328-2 assume !(~currentFloorID~0 < 0); 3390632#L2343-2 assume !(~currentFloorID~0 < 0); 3390630#L2356-2 assume !(~currentFloorID~0 < 1); 3390628#L2372-2 assume !(~currentFloorID~0 < 1); 3390627#L2385-2 assume ~currentFloorID~0 < 2; 3390625#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3390609#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3390600#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3390584#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3390585#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3413567#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3413566#L2694-3 assume !(1 == ~currentHeading~0); 3413563#L2704-9 assume !(0 == ~currentFloorID~0); 3411762#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3411752#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3411750#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3411749#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3411744#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3426272#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3411727#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3411717#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3411715#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 3411713#L947-2 assume !false; 3340803#L948 [2018-11-28 12:53:30,769 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:30,769 INFO L82 PathProgramCache]: Analyzing trace with hash 1783723758, now seen corresponding path program 1 times [2018-11-28 12:53:30,769 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:30,769 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:30,770 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:30,770 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:30,770 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:30,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:30,809 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:30,810 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:30,810 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:53:30,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:30,810 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:30,810 INFO L82 PathProgramCache]: Analyzing trace with hash 1733508177, now seen corresponding path program 4 times [2018-11-28 12:53:30,810 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:30,810 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:30,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:30,811 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:30,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:30,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:30,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:30,838 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:30,838 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:30,838 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:30,838 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:30,838 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:30,838 INFO L87 Difference]: Start difference. First operand 106807 states and 197675 transitions. cyclomatic complexity: 90881 Second operand 4 states. [2018-11-28 12:53:31,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:31,075 INFO L93 Difference]: Finished difference Result 106807 states and 197674 transitions. [2018-11-28 12:53:31,076 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-28 12:53:31,076 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106807 states and 197674 transitions. [2018-11-28 12:53:31,575 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:31,736 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106807 states to 106807 states and 197674 transitions. [2018-11-28 12:53:31,736 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80339 [2018-11-28 12:53:31,769 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80339 [2018-11-28 12:53:31,769 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106807 states and 197674 transitions. [2018-11-28 12:53:31,770 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:31,770 INFO L705 BuchiCegarLoop]: Abstraction has 106807 states and 197674 transitions. [2018-11-28 12:53:31,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106807 states and 197674 transitions. [2018-11-28 12:53:32,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106807 to 106807. [2018-11-28 12:53:32,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106807 states. [2018-11-28 12:53:32,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106807 states to 106807 states and 197674 transitions. [2018-11-28 12:53:32,441 INFO L728 BuchiCegarLoop]: Abstraction has 106807 states and 197674 transitions. [2018-11-28 12:53:32,441 INFO L608 BuchiCegarLoop]: Abstraction has 106807 states and 197674 transitions. [2018-11-28 12:53:32,441 INFO L442 BuchiCegarLoop]: ======== Iteration 28============ [2018-11-28 12:53:32,441 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106807 states and 197674 transitions. [2018-11-28 12:53:32,638 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 73974 [2018-11-28 12:53:32,638 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:32,638 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:32,639 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:32,639 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:32,639 INFO L794 eck$LassoCheckResult]: Stem: 3534917#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 3534918#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 3536251#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3536252#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3536560#L1143 assume 0 != main_~tmp~14; 3536561#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3536864#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3536000#L250 assume !(0 == getOrigin_~person); 3535546#L254 assume !(1 == getOrigin_~person); 3535475#L258 assume !(2 == getOrigin_~person); 3535476#L262 assume !(3 == getOrigin_~person); 3536288#L266 assume !(4 == getOrigin_~person); 3536234#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3536235#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3534052#L1525 assume !(0 == initPersonOnFloor_~floor); 3534053#L1552 assume 1 == initPersonOnFloor_~floor; 3537123#L1553 assume !(0 == initPersonOnFloor_~person); 3536894#L1556 assume !(1 == initPersonOnFloor_~person); 3535039#L1559 assume !(2 == initPersonOnFloor_~person); 3534782#L1562 assume !(3 == initPersonOnFloor_~person); 3534149#L1565 assume !(4 == initPersonOnFloor_~person); 3533661#L1568 assume !(5 == initPersonOnFloor_~person); 3533662#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3536188#L1317 assume !(0 == callOnFloor_~floorID); 3536521#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3536522#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3537399#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3537398#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3537397#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3535046#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3535047#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3535427#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3536163#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3537393#L2875 assume !(0 != timeShift_~tmp___9~2); 3536867#L2966 assume !(1 == ~doorState~0); 3536843#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3534015#L2318 assume !(1 == stopRequestedInDirection_~dir); 3534016#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3534777#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3534180#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3534181#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3534163#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3534027#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3534028#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3534779#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3536815#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3537380#L2694-2 assume !(1 == ~currentHeading~0); 3537381#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3535033#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3535034#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3552052#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3552051#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3552045#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3552050#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3552040#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3552030#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3552016#L112-1 cleanup_~i~2 := 0; 3552013#L947-2 assume !false; 3552014#L948 [2018-11-28 12:53:32,640 INFO L796 eck$LassoCheckResult]: Loop: 3552014#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3621551#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3621549#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3621547#L955 assume 1 != cleanup_~tmp___0~3; 3621545#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3621543#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3621541#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3621539#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3621535#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3621536#L1254-22 assume !(0 == isFloorCalling_~floorID); 3639907#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3639906#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3617177#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3610588#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3617152#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3617140#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3617141#L1254-26 assume !(0 == isFloorCalling_~floorID); 3614748#L1258-26 assume !(1 == isFloorCalling_~floorID); 3574778#L1262-26 assume !(2 == isFloorCalling_~floorID); 3574779#L1266-26 assume !(3 == isFloorCalling_~floorID); 3600036#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3607218#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3607216#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3607214#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 3607212#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 3607208#L2139-1 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3607204#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3607200#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3607198#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3607196#L2875-1 assume !(0 != timeShift_~tmp___9~2); 3607189#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3607190#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3566107#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3537509#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3537447#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 3537416#L2328-2 assume !(~currentFloorID~0 < 0); 3537417#L2343-2 assume !(~currentFloorID~0 < 0); 3630556#L2356-2 assume !(~currentFloorID~0 < 1); 3630119#L2372-2 assume !(~currentFloorID~0 < 1); 3617578#L2385-2 assume ~currentFloorID~0 < 2; 3617579#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3635192#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3635188#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3617230#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3606949#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3621668#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3621667#L2694-3 assume !(1 == ~currentHeading~0); 3621665#L2704-9 assume !(0 == ~currentFloorID~0); 3621662#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3621592#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3621591#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3621590#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3621585#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3621594#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3621580#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3621570#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3621556#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 3621554#L947-2 assume !false; 3552014#L948 [2018-11-28 12:53:32,640 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:32,640 INFO L82 PathProgramCache]: Analyzing trace with hash 1827456181, now seen corresponding path program 1 times [2018-11-28 12:53:32,640 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:32,640 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:32,641 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:32,641 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:32,641 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:32,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:32,691 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:32,692 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:32,692 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:53:32,692 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:32,692 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:32,692 INFO L82 PathProgramCache]: Analyzing trace with hash 1733508177, now seen corresponding path program 5 times [2018-11-28 12:53:32,692 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:32,692 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:32,693 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:32,693 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:32,693 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:32,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:32,723 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:32,723 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:32,724 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:32,724 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:32,724 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:53:32,724 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:53:32,724 INFO L87 Difference]: Start difference. First operand 106807 states and 197674 transitions. cyclomatic complexity: 90880 Second operand 5 states. [2018-11-28 12:53:33,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:33,712 INFO L93 Difference]: Finished difference Result 181926 states and 336594 transitions. [2018-11-28 12:53:33,713 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:53:33,713 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 181926 states and 336594 transitions. [2018-11-28 12:53:34,271 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 141388 [2018-11-28 12:53:34,683 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 181926 states to 181926 states and 336594 transitions. [2018-11-28 12:53:34,683 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 151279 [2018-11-28 12:53:34,779 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 151279 [2018-11-28 12:53:34,779 INFO L73 IsDeterministic]: Start isDeterministic. Operand 181926 states and 336594 transitions. [2018-11-28 12:53:34,779 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:34,780 INFO L705 BuchiCegarLoop]: Abstraction has 181926 states and 336594 transitions. [2018-11-28 12:53:34,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181926 states and 336594 transitions. [2018-11-28 12:53:35,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181926 to 114397. [2018-11-28 12:53:35,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 114397 states. [2018-11-28 12:53:36,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114397 states to 114397 states and 211832 transitions. [2018-11-28 12:53:36,523 INFO L728 BuchiCegarLoop]: Abstraction has 114397 states and 211832 transitions. [2018-11-28 12:53:36,523 INFO L608 BuchiCegarLoop]: Abstraction has 114397 states and 211832 transitions. [2018-11-28 12:53:36,523 INFO L442 BuchiCegarLoop]: ======== Iteration 29============ [2018-11-28 12:53:36,523 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 114397 states and 211832 transitions. [2018-11-28 12:53:36,717 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 81556 [2018-11-28 12:53:36,718 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:36,718 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:36,718 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:36,718 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:36,719 INFO L794 eck$LassoCheckResult]: Stem: 3823670#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 3823671#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 3825002#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3825003#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 3825318#L1143 assume 0 != main_~tmp~14; 3825319#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3825623#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3824750#L250 assume !(0 == getOrigin_~person); 3824313#L254 assume !(1 == getOrigin_~person); 3824243#L258 assume !(2 == getOrigin_~person); 3824244#L262 assume !(3 == getOrigin_~person); 3825054#L266 assume !(4 == getOrigin_~person); 3824978#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3824979#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3822807#L1525 assume !(0 == initPersonOnFloor_~floor); 3822808#L1552 assume 1 == initPersonOnFloor_~floor; 3825877#L1553 assume !(0 == initPersonOnFloor_~person); 3825653#L1556 assume !(1 == initPersonOnFloor_~person); 3823792#L1559 assume !(2 == initPersonOnFloor_~person); 3823530#L1562 assume !(3 == initPersonOnFloor_~person); 3822902#L1565 assume !(4 == initPersonOnFloor_~person); 3822415#L1568 assume !(5 == initPersonOnFloor_~person); 3822416#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3824934#L1317 assume !(0 == callOnFloor_~floorID); 3825280#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3825281#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3826455#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3826454#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3826453#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3826452#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3826451#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3826450#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3826449#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3826448#L2875 assume !(0 != timeShift_~tmp___9~2); 3826447#L2966 assume !(1 == ~doorState~0); 3826446#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3826445#L2318 assume !(1 == stopRequestedInDirection_~dir); 3823525#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3823526#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3822937#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 3822938#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 3822915#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3822780#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 3822781#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3823528#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3824696#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3824697#L2694-2 assume !(1 == ~currentHeading~0); 3823796#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3823797#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3823785#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3850845#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3850840#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3850822#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3850819#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3850800#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3850790#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3850775#L112-1 cleanup_~i~2 := 0; 3850771#L947-2 assume !false; 3850772#L948 [2018-11-28 12:53:36,719 INFO L796 eck$LassoCheckResult]: Loop: 3850772#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3898878#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3898879#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 3898861#L955 assume 1 != cleanup_~tmp___0~3; 3898862#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3898849#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3898850#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 3898834#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 3898835#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3898823#L1254-22 assume !(0 == isFloorCalling_~floorID); 3898824#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3898804#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 3898805#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3891215#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3898772#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 3898757#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3898758#L1254-26 assume !(0 == isFloorCalling_~floorID); 3892823#L1258-26 assume !(1 == isFloorCalling_~floorID); 3892824#L1262-26 assume !(2 == isFloorCalling_~floorID); 3896296#L1266-26 assume !(3 == isFloorCalling_~floorID); 3896289#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3896287#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 3896286#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3896285#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 3896284#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 3896283#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 3896281#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3896280#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 3896278#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 3896277#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 3896270#L2875-1 assume !(0 != timeShift_~tmp___9~2); 3896271#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 3901655#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3901654#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 3855097#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 3902744#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 3902742#L2328-2 assume !(~currentFloorID~0 < 0); 3902739#L2343-2 assume !(~currentFloorID~0 < 0); 3902734#L2356-2 assume !(~currentFloorID~0 < 1); 3902726#L2372-2 assume !(~currentFloorID~0 < 1); 3902721#L2385-2 assume ~currentFloorID~0 < 2; 3902720#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 3902665#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 3902660#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3902622#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 3902619#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 3902615#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 3902609#L2694-3 assume !(1 == ~currentHeading~0); 3902603#L2704-9 assume !(0 == ~currentFloorID~0); 3902597#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3901440#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3901441#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 3901432#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 3901426#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 3900942#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 3898938#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 3898927#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 3898928#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 3898898#L947-2 assume !false; 3850772#L948 [2018-11-28 12:53:36,719 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:36,719 INFO L82 PathProgramCache]: Analyzing trace with hash 1827456181, now seen corresponding path program 2 times [2018-11-28 12:53:36,719 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:36,719 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:36,720 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:36,720 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:36,720 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:36,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:36,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:36,748 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:36,748 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:53:36,749 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:36,749 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:36,749 INFO L82 PathProgramCache]: Analyzing trace with hash 1500896306, now seen corresponding path program 1 times [2018-11-28 12:53:36,749 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:36,749 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:36,749 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:36,749 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:36,749 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:36,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:36,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:36,772 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:36,772 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:36,772 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:36,772 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:53:36,772 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:53:36,773 INFO L87 Difference]: Start difference. First operand 114397 states and 211832 transitions. cyclomatic complexity: 97448 Second operand 3 states. [2018-11-28 12:53:37,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:37,072 INFO L93 Difference]: Finished difference Result 114397 states and 211831 transitions. [2018-11-28 12:53:37,072 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:53:37,072 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 114397 states and 211831 transitions. [2018-11-28 12:53:37,420 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 81556 [2018-11-28 12:53:37,678 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 114397 states to 114397 states and 211831 transitions. [2018-11-28 12:53:37,678 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87929 [2018-11-28 12:53:37,732 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87929 [2018-11-28 12:53:37,732 INFO L73 IsDeterministic]: Start isDeterministic. Operand 114397 states and 211831 transitions. [2018-11-28 12:53:37,733 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:37,733 INFO L705 BuchiCegarLoop]: Abstraction has 114397 states and 211831 transitions. [2018-11-28 12:53:37,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114397 states and 211831 transitions. [2018-11-28 12:53:38,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114397 to 114397. [2018-11-28 12:53:38,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 114397 states. [2018-11-28 12:53:38,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114397 states to 114397 states and 211831 transitions. [2018-11-28 12:53:38,591 INFO L728 BuchiCegarLoop]: Abstraction has 114397 states and 211831 transitions. [2018-11-28 12:53:38,591 INFO L608 BuchiCegarLoop]: Abstraction has 114397 states and 211831 transitions. [2018-11-28 12:53:38,591 INFO L442 BuchiCegarLoop]: ======== Iteration 30============ [2018-11-28 12:53:38,591 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 114397 states and 211831 transitions. [2018-11-28 12:53:38,819 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 81556 [2018-11-28 12:53:38,819 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:38,820 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:38,820 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:38,820 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:38,821 INFO L794 eck$LassoCheckResult]: Stem: 4052476#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 4052477#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 4053818#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4053819#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 4054126#L1143 assume 0 != main_~tmp~14; 4054127#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 4054439#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4053561#L250 assume !(0 == getOrigin_~person); 4053108#L254 assume !(1 == getOrigin_~person); 4053035#L258 assume !(2 == getOrigin_~person); 4053036#L262 assume !(3 == getOrigin_~person); 4053854#L266 assume !(4 == getOrigin_~person); 4053800#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4053801#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4051611#L1525 assume !(0 == initPersonOnFloor_~floor); 4051612#L1552 assume 1 == initPersonOnFloor_~floor; 4054699#L1553 assume !(0 == initPersonOnFloor_~person); 4054469#L1556 assume !(1 == initPersonOnFloor_~person); 4052599#L1559 assume !(2 == initPersonOnFloor_~person); 4052343#L1562 assume !(3 == initPersonOnFloor_~person); 4051708#L1565 assume !(4 == initPersonOnFloor_~person); 4051218#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 4051219#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4053754#L1317 assume !(0 == callOnFloor_~floorID); 4054091#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4054092#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4054984#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4054983#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4054982#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4052606#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4052607#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4052987#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4053729#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4054978#L2875 assume !(0 != timeShift_~tmp___9~2); 4054442#L2966 assume !(1 == ~doorState~0); 4054420#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4051575#L2318 assume !(1 == stopRequestedInDirection_~dir); 4051576#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4052337#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4051740#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4051741#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4051722#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4051586#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 4051587#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4052339#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4054383#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4054960#L2694-2 assume !(1 == ~currentHeading~0); 4054961#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4052591#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4052592#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4066932#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4066931#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4066926#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4066933#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4066921#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4066911#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4066910#L112-1 cleanup_~i~2 := 0; 4066880#L947-2 assume !false; 4066881#L948 [2018-11-28 12:53:38,821 INFO L796 eck$LassoCheckResult]: Loop: 4066881#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4132707#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4132706#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 4132705#L955 assume 1 != cleanup_~tmp___0~3; 4132704#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4132703#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4132696#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 4132688#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 4128243#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4128245#L1254-22 assume !(0 == isFloorCalling_~floorID); 4148812#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4148811#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 4124219#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4124218#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4124217#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 4124216#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4122563#L1254-26 assume !(0 == isFloorCalling_~floorID); 4085863#L1258-26 assume !(1 == isFloorCalling_~floorID); 4085865#L1262-26 assume !(2 == isFloorCalling_~floorID); 4085720#L1266-26 assume !(3 == isFloorCalling_~floorID); 4085718#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4085716#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4085711#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4085708#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 4085705#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 4085704#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 4085126#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4085124#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4085121#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4085119#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4085116#L2875-1 assume !(0 != timeShift_~tmp___9~2); 4085114#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4085112#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4085110#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4085111#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4085550#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 4085548#L2328-2 assume !(~currentFloorID~0 < 0); 4085546#L2343-2 assume !(~currentFloorID~0 < 0); 4084242#L2356-2 assume !(~currentFloorID~0 < 1); 4084244#L2372-2 assume !(~currentFloorID~0 < 1); 4085542#L2385-2 assume ~currentFloorID~0 < 2; 4099966#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4099964#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4099960#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 4099486#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4099487#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4100497#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4100498#L2694-3 assume !(1 == ~currentHeading~0); 4100486#L2704-9 assume !(0 == ~currentFloorID~0); 4100487#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4132759#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4132752#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4132750#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4132737#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4132746#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4132725#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4132715#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4132714#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 4132713#L947-2 assume !false; 4066881#L948 [2018-11-28 12:53:38,821 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:38,821 INFO L82 PathProgramCache]: Analyzing trace with hash 1167924659, now seen corresponding path program 1 times [2018-11-28 12:53:38,821 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:38,821 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:38,822 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:38,822 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:38,822 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:38,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:38,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:38,847 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:38,848 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2018-11-28 12:53:38,848 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:38,848 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:38,848 INFO L82 PathProgramCache]: Analyzing trace with hash 1500896306, now seen corresponding path program 2 times [2018-11-28 12:53:38,848 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:38,848 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:38,848 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:38,848 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:38,849 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:38,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:38,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:38,881 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:38,881 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:38,881 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:38,881 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:53:38,881 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:53:38,881 INFO L87 Difference]: Start difference. First operand 114397 states and 211831 transitions. cyclomatic complexity: 97447 Second operand 3 states. [2018-11-28 12:53:39,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:39,172 INFO L93 Difference]: Finished difference Result 115499 states and 213325 transitions. [2018-11-28 12:53:39,173 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:53:39,173 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 115499 states and 213325 transitions. [2018-11-28 12:53:39,512 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 82184 [2018-11-28 12:53:39,761 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 115499 states to 115499 states and 213325 transitions. [2018-11-28 12:53:39,762 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 88751 [2018-11-28 12:53:39,813 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 88751 [2018-11-28 12:53:39,814 INFO L73 IsDeterministic]: Start isDeterministic. Operand 115499 states and 213325 transitions. [2018-11-28 12:53:39,854 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:39,854 INFO L705 BuchiCegarLoop]: Abstraction has 115499 states and 213325 transitions. [2018-11-28 12:53:39,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115499 states and 213325 transitions. [2018-11-28 12:53:40,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115499 to 115199. [2018-11-28 12:53:40,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 115199 states. [2018-11-28 12:53:41,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 115199 states to 115199 states and 213007 transitions. [2018-11-28 12:53:41,311 INFO L728 BuchiCegarLoop]: Abstraction has 115199 states and 213007 transitions. [2018-11-28 12:53:41,311 INFO L608 BuchiCegarLoop]: Abstraction has 115199 states and 213007 transitions. [2018-11-28 12:53:41,311 INFO L442 BuchiCegarLoop]: ======== Iteration 31============ [2018-11-28 12:53:41,311 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 115199 states and 213007 transitions. [2018-11-28 12:53:41,480 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 82044 [2018-11-28 12:53:41,480 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:41,480 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:41,480 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:41,481 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:41,481 INFO L794 eck$LassoCheckResult]: Stem: 4282372#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 4282373#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 4283721#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4283722#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 4284023#L1143 assume 0 != main_~tmp~14; 4284024#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 4284322#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4283463#L250 assume !(0 == getOrigin_~person); 4283001#L254 assume !(1 == getOrigin_~person); 4282934#L258 assume !(2 == getOrigin_~person); 4282935#L262 assume !(3 == getOrigin_~person); 4283760#L266 assume !(4 == getOrigin_~person); 4283702#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4283703#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4281518#L1525 assume !(0 == initPersonOnFloor_~floor); 4281519#L1552 assume 1 == initPersonOnFloor_~floor; 4284570#L1553 assume !(0 == initPersonOnFloor_~person); 4284351#L1556 assume !(1 == initPersonOnFloor_~person); 4282491#L1559 assume !(2 == initPersonOnFloor_~person); 4282237#L1562 assume !(3 == initPersonOnFloor_~person); 4281612#L1565 assume !(4 == initPersonOnFloor_~person); 4281123#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 4281124#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4283657#L1317 assume !(0 == callOnFloor_~floorID); 4283991#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4283992#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4285459#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4285458#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4285457#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4285456#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4285455#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4285454#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4285453#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4285452#L2875 assume !(0 != timeShift_~tmp___9~2); 4285451#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 4285450#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4285449#L2318 assume !(1 == stopRequestedInDirection_~dir); 4285448#L2487 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4285423#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4285447#L2974 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 4285411#L2749 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 4285446#L2754 timeShift_#t~ret102 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret102;havoc timeShift_#t~ret102;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4285445#L2318-1 assume !(1 == stopRequestedInDirection_~dir); 4285444#L2487-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4285443#L2640-1 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4285441#L2983 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4285442#L2694-2 assume !(1 == ~currentHeading~0); 4282494#L2704-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4282484#L2704-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4282485#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4297997#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4297995#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4297980#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4297985#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4297961#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4297951#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4297949#L112-1 cleanup_~i~2 := 0; 4297946#L947-2 assume !false; 4297947#L948 [2018-11-28 12:53:41,481 INFO L796 eck$LassoCheckResult]: Loop: 4297947#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4347328#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4347327#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 4347326#L955 assume 1 != cleanup_~tmp___0~3; 4347325#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4347324#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4347310#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 4347308#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 4347305#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4347304#L1254-22 assume !(0 == isFloorCalling_~floorID); 4347302#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4347300#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 4347298#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4330153#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4347295#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 4347293#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4347290#L1254-26 assume !(0 == isFloorCalling_~floorID); 4347291#L1258-26 assume !(1 == isFloorCalling_~floorID); 4363947#L1262-26 assume !(2 == isFloorCalling_~floorID); 4363945#L1266-26 assume !(3 == isFloorCalling_~floorID); 4363942#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4363939#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4363937#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4363935#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 4363933#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 4363931#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 4363926#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4363924#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4363921#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4363919#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4363916#L2875-1 assume !(0 != timeShift_~tmp___9~2); 4363915#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4363908#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4363906#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4347584#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4363904#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 4363902#L2328-2 assume !(~currentFloorID~0 < 0); 4363900#L2343-2 assume !(~currentFloorID~0 < 0); 4363898#L2356-2 assume !(~currentFloorID~0 < 1); 4363896#L2372-2 assume !(~currentFloorID~0 < 1); 4363894#L2385-2 assume ~currentFloorID~0 < 2; 4363893#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4363891#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4363887#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 4363860#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4363858#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4363853#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4363851#L2694-3 assume !(1 == ~currentHeading~0); 4363354#L2704-9 assume !(0 == ~currentFloorID~0); 4347379#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4347373#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4347371#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4347368#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4347362#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4347676#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4347344#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4347334#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4347331#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 4347329#L947-2 assume !false; 4297947#L948 [2018-11-28 12:53:41,481 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:41,481 INFO L82 PathProgramCache]: Analyzing trace with hash 1301938165, now seen corresponding path program 1 times [2018-11-28 12:53:41,481 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:41,481 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:41,482 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:41,482 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:41,482 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:41,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:41,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:41,529 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:41,529 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:53:41,530 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:41,530 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:41,530 INFO L82 PathProgramCache]: Analyzing trace with hash 1500896306, now seen corresponding path program 3 times [2018-11-28 12:53:41,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:41,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:41,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:41,530 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:41,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:41,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:41,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:41,547 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:41,547 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:41,548 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:41,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:53:41,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:53:41,548 INFO L87 Difference]: Start difference. First operand 115199 states and 213007 transitions. cyclomatic complexity: 97821 Second operand 4 states. [2018-11-28 12:53:42,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:42,303 INFO L93 Difference]: Finished difference Result 264292 states and 490461 transitions. [2018-11-28 12:53:42,303 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:53:42,303 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 264292 states and 490461 transitions. [2018-11-28 12:53:43,144 INFO L131 ngComponentsAnalysis]: Automaton has 13 accepting balls. 206124 [2018-11-28 12:53:43,790 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 264292 states to 264262 states and 490421 transitions. [2018-11-28 12:53:43,790 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 213732 [2018-11-28 12:53:43,927 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 213732 [2018-11-28 12:53:43,927 INFO L73 IsDeterministic]: Start isDeterministic. Operand 264262 states and 490421 transitions. [2018-11-28 12:53:43,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:43,929 INFO L705 BuchiCegarLoop]: Abstraction has 264262 states and 490421 transitions. [2018-11-28 12:53:44,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264262 states and 490421 transitions. [2018-11-28 12:53:45,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264262 to 140374. [2018-11-28 12:53:45,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140374 states. [2018-11-28 12:53:46,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140374 states to 140374 states and 259315 transitions. [2018-11-28 12:53:46,077 INFO L728 BuchiCegarLoop]: Abstraction has 140374 states and 259315 transitions. [2018-11-28 12:53:46,077 INFO L608 BuchiCegarLoop]: Abstraction has 140374 states and 259315 transitions. [2018-11-28 12:53:46,077 INFO L442 BuchiCegarLoop]: ======== Iteration 32============ [2018-11-28 12:53:46,077 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 140374 states and 259315 transitions. [2018-11-28 12:53:46,276 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 106097 [2018-11-28 12:53:46,276 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:46,276 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:46,276 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:46,277 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:46,277 INFO L794 eck$LassoCheckResult]: Stem: 4661895#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 4661896#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 4663232#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4663233#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 4663556#L1143 assume 0 != main_~tmp~14; 4663557#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 4663874#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4662975#L250 assume !(0 == getOrigin_~person); 4662531#L254 assume !(1 == getOrigin_~person); 4662457#L258 assume !(2 == getOrigin_~person); 4662458#L262 assume !(3 == getOrigin_~person); 4663286#L266 assume !(4 == getOrigin_~person); 4663207#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4663208#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4661014#L1525 assume !(0 == initPersonOnFloor_~floor); 4661015#L1552 assume 1 == initPersonOnFloor_~floor; 4664133#L1553 assume !(0 == initPersonOnFloor_~person); 4663901#L1556 assume !(1 == initPersonOnFloor_~person); 4662019#L1559 assume !(2 == initPersonOnFloor_~person); 4661756#L1562 assume !(3 == initPersonOnFloor_~person); 4661110#L1565 assume !(4 == initPersonOnFloor_~person); 4660626#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 4660627#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4663161#L1317 assume !(0 == callOnFloor_~floorID); 4663520#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4663521#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4664633#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4664632#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4664631#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4664630#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4664629#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4664627#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4664626#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4664624#L2875 assume !(0 != timeShift_~tmp___9~2); 4664623#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 4664622#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4664621#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4664620#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4664619#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 4664618#L2328 assume !(~currentFloorID~0 < 0); 4664617#L2343 assume !(~currentFloorID~0 < 0); 4664616#L2356 assume ~currentFloorID~0 < 1; 4664611#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4661724#L1254-2 assume !(0 == isFloorCalling_~floorID); 4661446#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4661447#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 4663107#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4664425#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4664426#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4664414#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4664415#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4664284#L2698 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 4664285#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4661111#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4661112#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4663620#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4661774#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4680899#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4680888#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4680878#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4680864#L112-1 cleanup_~i~2 := 0; 4680861#L947-2 assume !false; 4680862#L948 [2018-11-28 12:53:46,277 INFO L796 eck$LassoCheckResult]: Loop: 4680862#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4784174#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4784166#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 4784155#L955 assume 1 != cleanup_~tmp___0~3; 4784156#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4784143#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4784144#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 4784132#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 4784133#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4784164#L1254-22 assume !(0 == isFloorCalling_~floorID); 4784821#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4784819#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 4784817#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4760955#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4784128#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 4784119#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4784113#L1254-26 assume !(0 == isFloorCalling_~floorID); 4756071#L1258-26 assume !(1 == isFloorCalling_~floorID); 4756072#L1262-26 assume !(2 == isFloorCalling_~floorID); 4784805#L1266-26 assume !(3 == isFloorCalling_~floorID); 4784802#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4784799#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 4784797#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4784795#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 4784793#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 4784791#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 4784786#L2143-1 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4784784#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 4784781#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 4784779#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 4784777#L2875-1 assume !(0 != timeShift_~tmp___9~2); 4784776#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4784774#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4784773#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4784772#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 4784771#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 4784769#L2328-2 assume !(~currentFloorID~0 < 0); 4784768#L2343-2 assume !(~currentFloorID~0 < 0); 4784766#L2356-2 assume !(~currentFloorID~0 < 1); 4784764#L2372-2 assume !(~currentFloorID~0 < 1); 4784763#L2385-2 assume ~currentFloorID~0 < 2; 4784760#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 4784748#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 4784739#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 4784727#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4784726#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 4784724#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4784722#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 4784719#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 4784716#L2698-9 assume !(0 != continueInDirection_~tmp~21); 4784712#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4784703#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4784701#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 4784699#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 4784482#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 4784695#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 4784243#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 4784233#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 4784191#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 4784185#L947-2 assume !false; 4680862#L948 [2018-11-28 12:53:46,277 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:46,277 INFO L82 PathProgramCache]: Analyzing trace with hash 952881459, now seen corresponding path program 1 times [2018-11-28 12:53:46,278 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:46,278 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:46,278 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:46,278 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:46,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:46,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:46,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:46,324 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:46,324 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:46,324 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:46,324 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:46,324 INFO L82 PathProgramCache]: Analyzing trace with hash 563891151, now seen corresponding path program 1 times [2018-11-28 12:53:46,324 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:46,324 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:46,325 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:46,325 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:46,325 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:46,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:46,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:46,337 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:46,337 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:46,337 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:46,337 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:53:46,338 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:53:46,338 INFO L87 Difference]: Start difference. First operand 140374 states and 259315 transitions. cyclomatic complexity: 118954 Second operand 5 states. [2018-11-28 12:53:47,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:47,592 INFO L93 Difference]: Finished difference Result 245452 states and 453083 transitions. [2018-11-28 12:53:47,592 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:53:47,593 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 245452 states and 453083 transitions. [2018-11-28 12:53:48,420 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 203376 [2018-11-28 12:53:48,997 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 245452 states to 245452 states and 453083 transitions. [2018-11-28 12:53:48,998 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 213943 [2018-11-28 12:53:49,132 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 213943 [2018-11-28 12:53:49,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 245452 states and 453083 transitions. [2018-11-28 12:53:49,135 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:49,135 INFO L705 BuchiCegarLoop]: Abstraction has 245452 states and 453083 transitions. [2018-11-28 12:53:49,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245452 states and 453083 transitions. [2018-11-28 12:53:51,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245452 to 151849. [2018-11-28 12:53:51,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 151849 states. [2018-11-28 12:53:51,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151849 states to 151849 states and 280573 transitions. [2018-11-28 12:53:51,366 INFO L728 BuchiCegarLoop]: Abstraction has 151849 states and 280573 transitions. [2018-11-28 12:53:51,366 INFO L608 BuchiCegarLoop]: Abstraction has 151849 states and 280573 transitions. [2018-11-28 12:53:51,366 INFO L442 BuchiCegarLoop]: ======== Iteration 33============ [2018-11-28 12:53:51,366 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 151849 states and 280573 transitions. [2018-11-28 12:53:51,648 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 117572 [2018-11-28 12:53:51,648 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:53:51,648 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:53:51,649 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:51,649 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:53:51,649 INFO L794 eck$LassoCheckResult]: Stem: 5047725#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 5047726#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 5049071#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5049072#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 5049387#L1143 assume 0 != main_~tmp~14; 5049388#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5049693#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5048816#L250 assume !(0 == getOrigin_~person); 5048371#L254 assume !(1 == getOrigin_~person); 5048290#L258 assume !(2 == getOrigin_~person); 5048291#L262 assume !(3 == getOrigin_~person); 5049123#L266 assume !(4 == getOrigin_~person); 5049052#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5049053#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5046865#L1525 assume !(0 == initPersonOnFloor_~floor); 5046866#L1552 assume 1 == initPersonOnFloor_~floor; 5049943#L1553 assume !(0 == initPersonOnFloor_~person); 5049727#L1556 assume !(1 == initPersonOnFloor_~person); 5047847#L1559 assume !(2 == initPersonOnFloor_~person); 5047587#L1562 assume !(3 == initPersonOnFloor_~person); 5046959#L1565 assume !(4 == initPersonOnFloor_~person); 5046475#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 5046476#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5049006#L1317 assume !(0 == callOnFloor_~floorID); 5049350#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 5049351#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5050190#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5050207#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5050204#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5047851#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5047852#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5048240#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5048980#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5050202#L2875 assume !(0 != timeShift_~tmp___9~2); 5049697#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 5049672#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5046831#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5046832#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5047655#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 5048261#L2328 assume !(~currentFloorID~0 < 0); 5048262#L2343 assume !(~currentFloorID~0 < 0); 5047724#L2356 assume ~currentFloorID~0 < 1; 5046943#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5046944#L1254-2 assume !(0 == isFloorCalling_~floorID); 5047286#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5047287#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 5046863#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5046616#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5050205#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5050206#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5047650#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5047651#L2698 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 5050395#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5047841#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5077661#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5077657#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5077601#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5077650#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5077544#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5077534#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5077529#L112-1 cleanup_~i~2 := 0; 5077523#L947-2 assume !false; 5077524#L948 [2018-11-28 12:53:51,650 INFO L796 eck$LassoCheckResult]: Loop: 5077524#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5119902#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5119898#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 5119899#L955 assume 1 != cleanup_~tmp___0~3; 5119894#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5119895#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5119890#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 5119891#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 5119885#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5119887#L1254-22 assume !(0 == isFloorCalling_~floorID); 5115733#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5115727#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 5115728#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5115696#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5115697#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 5115692#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5115693#L1254-26 assume !(0 == isFloorCalling_~floorID); 5119872#L1258-26 assume !(1 == isFloorCalling_~floorID); 5120180#L1262-26 assume !(2 == isFloorCalling_~floorID); 5120178#L1266-26 assume !(3 == isFloorCalling_~floorID); 5120176#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5120175#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5120174#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5120173#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 5120172#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 5120171#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 5120170#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 5120169#L2147-1 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5120168#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5120166#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5120165#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5120163#L2875-1 assume !(0 != timeShift_~tmp___9~2); 5120162#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5120160#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5120159#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5120158#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5120157#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 5120155#L2328-2 assume !(~currentFloorID~0 < 0); 5120153#L2343-2 assume !(~currentFloorID~0 < 0); 5120151#L2356-2 assume !(~currentFloorID~0 < 1); 5120149#L2372-2 assume !(~currentFloorID~0 < 1); 5120147#L2385-2 assume ~currentFloorID~0 < 2; 5120145#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5120146#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5120274#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 5120089#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5120090#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5120085#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5119974#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5119964#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5119953#L2698-9 assume !(0 != continueInDirection_~tmp~21); 5119940#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5119930#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5115860#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5119929#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5120847#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5120846#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5119915#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5119905#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5119904#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 5119903#L947-2 assume !false; 5077524#L948 [2018-11-28 12:53:51,650 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:51,650 INFO L82 PathProgramCache]: Analyzing trace with hash 952881459, now seen corresponding path program 2 times [2018-11-28 12:53:51,650 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:51,650 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:51,651 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:51,651 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:53:51,651 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:51,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:51,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:51,695 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:51,695 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:51,695 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:53:51,695 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:53:51,695 INFO L82 PathProgramCache]: Analyzing trace with hash 1194675211, now seen corresponding path program 1 times [2018-11-28 12:53:51,695 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:53:51,695 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:53:51,696 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:51,696 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:53:51,696 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:53:51,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:53:51,732 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:53:51,732 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:53:51,732 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:53:51,732 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:53:51,732 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:53:51,732 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:53:51,733 INFO L87 Difference]: Start difference. First operand 151849 states and 280573 transitions. cyclomatic complexity: 128737 Second operand 5 states. [2018-11-28 12:53:53,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:53:53,180 INFO L93 Difference]: Finished difference Result 268202 states and 495523 transitions. [2018-11-28 12:53:53,180 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 12:53:53,180 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 268202 states and 495523 transitions. [2018-11-28 12:53:54,029 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 226126 [2018-11-28 12:53:54,680 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 268202 states to 268202 states and 495523 transitions. [2018-11-28 12:53:54,680 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 236693 [2018-11-28 12:53:54,833 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 236693 [2018-11-28 12:53:54,833 INFO L73 IsDeterministic]: Start isDeterministic. Operand 268202 states and 495523 transitions. [2018-11-28 12:53:58,432 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:53:58,432 INFO L705 BuchiCegarLoop]: Abstraction has 268202 states and 495523 transitions. [2018-11-28 12:53:58,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268202 states and 495523 transitions. [2018-11-28 12:53:59,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268202 to 163248. [2018-11-28 12:53:59,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 163248 states. [2018-11-28 12:53:59,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163248 states to 163248 states and 301683 transitions. [2018-11-28 12:53:59,883 INFO L728 BuchiCegarLoop]: Abstraction has 163248 states and 301683 transitions. [2018-11-28 12:53:59,883 INFO L608 BuchiCegarLoop]: Abstraction has 163248 states and 301683 transitions. [2018-11-28 12:53:59,884 INFO L442 BuchiCegarLoop]: ======== Iteration 34============ [2018-11-28 12:53:59,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 163248 states and 301683 transitions. [2018-11-28 12:54:00,214 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 128971 [2018-11-28 12:54:00,214 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:54:00,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:54:00,215 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:00,215 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:00,215 INFO L794 eck$LassoCheckResult]: Stem: 5467804#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 5467805#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 5469150#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5469151#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 5469481#L1143 assume 0 != main_~tmp~14; 5469482#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5469781#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5468895#L250 assume !(0 == getOrigin_~person); 5468450#L254 assume !(1 == getOrigin_~person); 5468382#L258 assume !(2 == getOrigin_~person); 5468383#L262 assume !(3 == getOrigin_~person); 5469210#L266 assume !(4 == getOrigin_~person); 5469127#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5469128#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5466941#L1525 assume !(0 == initPersonOnFloor_~floor); 5466942#L1552 assume 1 == initPersonOnFloor_~floor; 5470027#L1553 assume !(0 == initPersonOnFloor_~person); 5469812#L1556 assume !(1 == initPersonOnFloor_~person); 5467929#L1559 assume !(2 == initPersonOnFloor_~person); 5467669#L1562 assume !(3 == initPersonOnFloor_~person); 5467035#L1565 assume !(4 == initPersonOnFloor_~person); 5466549#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 5466550#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5469083#L1317 assume !(0 == callOnFloor_~floorID); 5469442#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 5469443#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5470291#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5470306#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5470303#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5467933#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5467934#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5468323#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5469058#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5470301#L2875 assume !(0 != timeShift_~tmp___9~2); 5469783#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 5469765#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5466905#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5466906#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5467735#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 5468345#L2328 assume !(~currentFloorID~0 < 0); 5468346#L2343 assume !(~currentFloorID~0 < 0); 5467803#L2356 assume ~currentFloorID~0 < 1; 5467022#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5467023#L1254-2 assume !(0 == isFloorCalling_~floorID); 5467366#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5467367#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 5466937#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5466690#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5470304#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5470305#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5467730#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5467731#L2698 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 5470500#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5467923#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5493307#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5493290#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5493282#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5493278#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5493270#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5493260#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5493245#L112-1 cleanup_~i~2 := 0; 5493241#L947-2 assume !false; 5493242#L948 [2018-11-28 12:54:00,216 INFO L796 eck$LassoCheckResult]: Loop: 5493242#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5540284#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5540280#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 5540276#L955 assume 1 != cleanup_~tmp___0~3; 5540272#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5540267#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5540262#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 5540257#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 5540251#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5540246#L1254-22 assume !(0 == isFloorCalling_~floorID); 5540240#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5540235#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 5540224#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5540225#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5540220#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 5540221#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5540215#L1254-26 assume !(0 == isFloorCalling_~floorID); 5540217#L1258-26 assume !(1 == isFloorCalling_~floorID); 5550488#L1262-26 assume !(2 == isFloorCalling_~floorID); 5550485#L1266-26 assume !(3 == isFloorCalling_~floorID); 5550482#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5550480#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5550478#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5550476#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 5550474#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 5550472#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 5550470#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 5550468#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5550466#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5550464#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5550461#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5550459#L2875-1 assume !(0 != timeShift_~tmp___9~2); 5550455#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5550453#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5550452#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5550451#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5550450#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 5550448#L2328-2 assume !(~currentFloorID~0 < 0); 5550445#L2343-2 assume !(~currentFloorID~0 < 0); 5550441#L2356-2 assume !(~currentFloorID~0 < 1); 5550438#L2372-2 assume !(~currentFloorID~0 < 1); 5550436#L2385-2 assume ~currentFloorID~0 < 2; 5550435#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5550420#L1254-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5550411#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 5550399#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5550398#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5550396#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5548472#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5548467#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5548462#L2698-9 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 5540534#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5540396#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5540391#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5540389#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5540384#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5540373#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5540354#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5540344#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5540319#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 5540291#L947-2 assume !false; 5493242#L948 [2018-11-28 12:54:00,216 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:00,216 INFO L82 PathProgramCache]: Analyzing trace with hash 952881459, now seen corresponding path program 3 times [2018-11-28 12:54:00,216 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:00,216 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:00,217 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:00,217 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:54:00,217 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:00,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:00,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:00,274 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:00,274 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:00,274 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:54:00,274 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:00,274 INFO L82 PathProgramCache]: Analyzing trace with hash -1750372665, now seen corresponding path program 1 times [2018-11-28 12:54:00,275 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:00,275 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:00,275 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:00,275 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:54:00,275 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:00,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:00,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:00,305 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:00,305 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:54:00,305 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:54:00,305 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:54:00,305 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:54:00,306 INFO L87 Difference]: Start difference. First operand 163248 states and 301683 transitions. cyclomatic complexity: 138448 Second operand 3 states. [2018-11-28 12:54:00,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:54:00,824 INFO L93 Difference]: Finished difference Result 167836 states and 307747 transitions. [2018-11-28 12:54:00,824 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:54:00,825 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 167836 states and 307747 transitions. [2018-11-28 12:54:01,778 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 131746 [2018-11-28 12:54:02,098 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 167836 states to 167836 states and 307747 transitions. [2018-11-28 12:54:02,098 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 139612 [2018-11-28 12:54:02,184 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 139612 [2018-11-28 12:54:02,184 INFO L73 IsDeterministic]: Start isDeterministic. Operand 167836 states and 307747 transitions. [2018-11-28 12:54:02,202 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:54:02,202 INFO L705 BuchiCegarLoop]: Abstraction has 167836 states and 307747 transitions. [2018-11-28 12:54:02,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167836 states and 307747 transitions. [2018-11-28 12:54:03,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167836 to 162960. [2018-11-28 12:54:03,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 162960 states. [2018-11-28 12:54:03,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162960 states to 162960 states and 300675 transitions. [2018-11-28 12:54:03,395 INFO L728 BuchiCegarLoop]: Abstraction has 162960 states and 300675 transitions. [2018-11-28 12:54:03,395 INFO L608 BuchiCegarLoop]: Abstraction has 162960 states and 300675 transitions. [2018-11-28 12:54:03,395 INFO L442 BuchiCegarLoop]: ======== Iteration 35============ [2018-11-28 12:54:03,395 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 162960 states and 300675 transitions. [2018-11-28 12:54:03,729 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 128813 [2018-11-28 12:54:03,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:54:03,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:54:03,730 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:03,730 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:03,731 INFO L794 eck$LassoCheckResult]: Stem: 5798906#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 5798907#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 5800248#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5800249#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 5800559#L1143 assume 0 != main_~tmp~14; 5800560#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 5800858#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5799989#L250 assume !(0 == getOrigin_~person); 5799536#L254 assume !(1 == getOrigin_~person); 5799473#L258 assume !(2 == getOrigin_~person); 5799474#L262 assume !(3 == getOrigin_~person); 5800290#L266 assume !(4 == getOrigin_~person); 5800228#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5800229#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5798023#L1525 assume !(0 == initPersonOnFloor_~floor); 5798024#L1552 assume 1 == initPersonOnFloor_~floor; 5801101#L1553 assume !(0 == initPersonOnFloor_~person); 5800886#L1556 assume !(1 == initPersonOnFloor_~person); 5799034#L1559 assume !(2 == initPersonOnFloor_~person); 5798762#L1562 assume !(3 == initPersonOnFloor_~person); 5798122#L1565 assume !(4 == initPersonOnFloor_~person); 5797642#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 5797643#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5800183#L1317 assume !(0 == callOnFloor_~floorID); 5800523#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 5800524#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5801382#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5801378#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5801379#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5799038#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5799039#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5800157#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5800159#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5801371#L2875 assume !(0 != timeShift_~tmp___9~2); 5801373#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 5800843#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5800844#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5798830#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5798831#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 5799436#L2328 assume !(~currentFloorID~0 < 0); 5799437#L2343 assume !(~currentFloorID~0 < 0); 5798904#L2356 assume ~currentFloorID~0 < 1; 5798905#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5798730#L1254-2 assume !(0 == isFloorCalling_~floorID); 5798731#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5800135#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 5800136#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5801400#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5801401#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5801365#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5801366#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5801250#L2698 assume 0 != continueInDirection_~tmp~21;~currentHeading~0 := 0; 5801251#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5799028#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5816519#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5816518#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5816513#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5816511#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5816507#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5816497#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5816495#L112-1 cleanup_~i~2 := 0; 5816496#L947-2 assume !false; 5816692#L948 [2018-11-28 12:54:03,731 INFO L796 eck$LassoCheckResult]: Loop: 5816692#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5935154#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5935152#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 5935151#L955 assume 1 != cleanup_~tmp___0~3; 5934819#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5934818#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5900612#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 5900613#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 5934811#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5934805#L1254-22 assume !(0 == isFloorCalling_~floorID); 5934806#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5929193#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 5929194#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5923589#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5923590#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 5923585#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5923586#L1254-26 assume !(0 == isFloorCalling_~floorID); 5923579#L1258-26 assume !(1 == isFloorCalling_~floorID); 5923581#L1262-26 assume !(2 == isFloorCalling_~floorID); 5935802#L1266-26 assume !(3 == isFloorCalling_~floorID); 5935801#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5935800#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 5935799#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5935798#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 5935797#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 5935796#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 5935795#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 5935794#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5935793#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 5935791#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5935790#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 5935788#L2875-1 assume !(0 != timeShift_~tmp___9~2); 5935787#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5935785#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5935784#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5935783#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 5935782#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 5935780#L2328-2 assume !(~currentFloorID~0 < 0); 5935778#L2343-2 assume !(~currentFloorID~0 < 0); 5935776#L2356-2 assume !(~currentFloorID~0 < 1); 5935774#L2372-2 assume !(~currentFloorID~0 < 1); 5935773#L2385-2 assume ~currentFloorID~0 < 2; 5935772#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 5935771#L1254-29 assume !(0 == isFloorCalling_~floorID); 5935770#L1258-29 assume !(1 == isFloorCalling_~floorID); 5935769#L1262-29 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 5935767#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 5935755#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 5935753#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 5935750#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 5935748#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 5935745#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 5935744#L2698-9 assume !(0 != continueInDirection_~tmp~21); 5935736#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5935372#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5935371#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 5935370#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 5935364#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 5935374#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 5935353#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 5935343#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 5935160#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 5935158#L947-2 assume !false; 5816692#L948 [2018-11-28 12:54:03,731 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:03,731 INFO L82 PathProgramCache]: Analyzing trace with hash 952881459, now seen corresponding path program 4 times [2018-11-28 12:54:03,731 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:03,731 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:03,732 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:03,732 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:54:03,732 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:03,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:03,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:03,784 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:03,784 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:03,784 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:54:03,784 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:03,784 INFO L82 PathProgramCache]: Analyzing trace with hash -880476572, now seen corresponding path program 1 times [2018-11-28 12:54:03,784 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:03,784 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:03,785 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:03,785 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:54:03,785 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:03,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:03,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:03,831 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:03,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:03,832 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:54:03,832 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:54:03,832 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:54:03,832 INFO L87 Difference]: Start difference. First operand 162960 states and 300675 transitions. cyclomatic complexity: 137728 Second operand 5 states. [2018-11-28 12:54:04,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:54:04,356 INFO L93 Difference]: Finished difference Result 163162 states and 300751 transitions. [2018-11-28 12:54:04,356 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:54:04,356 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 163162 states and 300751 transitions. [2018-11-28 12:54:05,230 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 128817 [2018-11-28 12:54:05,485 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 163162 states to 163094 states and 300647 transitions. [2018-11-28 12:54:05,485 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135930 [2018-11-28 12:54:05,546 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135930 [2018-11-28 12:54:05,546 INFO L73 IsDeterministic]: Start isDeterministic. Operand 163094 states and 300647 transitions. [2018-11-28 12:54:05,587 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:54:05,587 INFO L705 BuchiCegarLoop]: Abstraction has 163094 states and 300647 transitions. [2018-11-28 12:54:05,656 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163094 states and 300647 transitions. [2018-11-28 12:54:06,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163094 to 162858. [2018-11-28 12:54:06,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 162858 states. [2018-11-28 12:54:06,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162858 states to 162858 states and 300411 transitions. [2018-11-28 12:54:06,823 INFO L728 BuchiCegarLoop]: Abstraction has 162858 states and 300411 transitions. [2018-11-28 12:54:06,823 INFO L608 BuchiCegarLoop]: Abstraction has 162858 states and 300411 transitions. [2018-11-28 12:54:06,823 INFO L442 BuchiCegarLoop]: ======== Iteration 36============ [2018-11-28 12:54:06,823 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 162858 states and 300411 transitions. [2018-11-28 12:54:07,159 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 128745 [2018-11-28 12:54:07,159 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:54:07,160 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:54:07,160 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:07,160 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:07,160 INFO L794 eck$LassoCheckResult]: Stem: 6125041#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 6125042#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 6126371#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6126372#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 6126685#L1143 assume 0 != main_~tmp~14; 6126686#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6126994#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6126111#L250 assume !(0 == getOrigin_~person); 6125670#L254 assume !(1 == getOrigin_~person); 6125607#L258 assume !(2 == getOrigin_~person); 6125608#L262 assume !(3 == getOrigin_~person); 6126421#L266 assume !(4 == getOrigin_~person); 6126348#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6126349#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6124163#L1525 assume !(0 == initPersonOnFloor_~floor); 6124164#L1552 assume 1 == initPersonOnFloor_~floor; 6127264#L1553 assume !(0 == initPersonOnFloor_~person); 6127024#L1556 assume !(1 == initPersonOnFloor_~person); 6125170#L1559 assume !(2 == initPersonOnFloor_~person); 6124902#L1562 assume !(3 == initPersonOnFloor_~person); 6124256#L1565 assume !(4 == initPersonOnFloor_~person); 6123780#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 6123781#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6126304#L1317 assume !(0 == callOnFloor_~floorID); 6126653#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 6126654#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6127604#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6127584#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 6127565#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6125173#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6125174#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 6125551#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 6126280#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 6127547#L2875 assume !(0 != timeShift_~tmp___9~2); 6126996#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 6126981#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 6124126#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6124127#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 6124970#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 6125570#L2328 assume !(~currentFloorID~0 < 0); 6125571#L2343 assume !(~currentFloorID~0 < 0); 6125040#L2356 assume ~currentFloorID~0 < 1; 6124243#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6124244#L1254-2 assume !(0 == isFloorCalling_~floorID); 6124591#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6124592#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 6126258#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 6127582#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 6127583#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 6127542#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6127543#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 6127406#L2698 assume !(0 != continueInDirection_~tmp~21); 6127408#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6132018#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6132017#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 6132016#L2174-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 6132009#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 6132008#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 6131920#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 6131910#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 6131909#L112-1 cleanup_~i~2 := 0; 6131869#L947-2 assume !false; 6131870#L948 [2018-11-28 12:54:07,161 INFO L796 eck$LassoCheckResult]: Loop: 6131870#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 6210550#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6210549#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 6210548#L955 assume 1 != cleanup_~tmp___0~3; 6210547#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6197546#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6197547#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 6197511#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 6197512#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6210523#L1254-22 assume !(0 == isFloorCalling_~floorID); 6210521#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6210453#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 6197726#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6197724#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6197722#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 6197720#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6197717#L1254-26 assume !(0 == isFloorCalling_~floorID); 6197714#L1258-26 assume !(1 == isFloorCalling_~floorID); 6197711#L1262-26 assume !(2 == isFloorCalling_~floorID); 6197709#L1266-26 assume !(3 == isFloorCalling_~floorID); 6197707#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6197705#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 6197703#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6197701#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 6197699#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 6197697#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 6197695#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 6197693#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6197691#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 6197689#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 6197686#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 6197669#L2875-1 assume !(0 != timeShift_~tmp___9~2); 6197649#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 6197647#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 6197646#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6197645#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 6197642#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 6197638#L2328-2 assume !(~currentFloorID~0 < 0); 6197639#L2343-2 assume !(~currentFloorID~0 < 0); 6203075#L2356-2 assume !(~currentFloorID~0 < 1); 6203073#L2372-2 assume !(~currentFloorID~0 < 1); 6203041#L2385-2 assume ~currentFloorID~0 < 2; 6203039#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6203035#L1254-29 assume !(0 == isFloorCalling_~floorID); 6203033#L1258-29 assume !(1 == isFloorCalling_~floorID); 6203032#L1262-29 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6203031#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 6203006#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 6203005#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 6203002#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 6203003#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6210709#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 6210707#L2698-9 assume !(0 != continueInDirection_~tmp~21); 6210706#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6210687#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6210686#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 6210685#L2174-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 6210678#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 6210677#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 6210563#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 6210553#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 6210552#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 6210551#L947-2 assume !false; 6131870#L948 [2018-11-28 12:54:07,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:07,161 INFO L82 PathProgramCache]: Analyzing trace with hash 1653946037, now seen corresponding path program 1 times [2018-11-28 12:54:07,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:07,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:07,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:07,162 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:54:07,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:07,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:07,231 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:07,231 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:07,231 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:07,231 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:54:07,232 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:07,232 INFO L82 PathProgramCache]: Analyzing trace with hash -880476572, now seen corresponding path program 2 times [2018-11-28 12:54:07,232 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:07,232 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:07,232 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:07,232 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:54:07,233 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:07,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:07,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:07,259 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:07,259 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:07,259 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:54:07,259 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:54:07,259 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:54:07,260 INFO L87 Difference]: Start difference. First operand 162858 states and 300411 transitions. cyclomatic complexity: 137566 Second operand 6 states. [2018-11-28 12:54:09,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:54:09,297 INFO L93 Difference]: Finished difference Result 626457 states and 1151408 transitions. [2018-11-28 12:54:09,297 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-28 12:54:09,298 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 626457 states and 1151408 transitions. [2018-11-28 12:54:11,406 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 504180 [2018-11-28 12:54:13,753 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 626457 states to 626457 states and 1151408 transitions. [2018-11-28 12:54:13,753 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 520622 [2018-11-28 12:54:13,992 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 520622 [2018-11-28 12:54:13,992 INFO L73 IsDeterministic]: Start isDeterministic. Operand 626457 states and 1151408 transitions. [2018-11-28 12:54:13,992 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:54:13,992 INFO L705 BuchiCegarLoop]: Abstraction has 626457 states and 1151408 transitions. [2018-11-28 12:54:14,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626457 states and 1151408 transitions. [2018-11-28 12:54:23,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626457 to 473663. [2018-11-28 12:54:23,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 473663 states. [2018-11-28 12:54:24,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 473663 states to 473663 states and 870636 transitions. [2018-11-28 12:54:24,599 INFO L728 BuchiCegarLoop]: Abstraction has 473663 states and 870636 transitions. [2018-11-28 12:54:24,599 INFO L608 BuchiCegarLoop]: Abstraction has 473663 states and 870636 transitions. [2018-11-28 12:54:24,599 INFO L442 BuchiCegarLoop]: ======== Iteration 37============ [2018-11-28 12:54:24,599 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 473663 states and 870636 transitions. [2018-11-28 12:54:25,563 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 379465 [2018-11-28 12:54:25,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:54:25,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:54:25,564 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:25,564 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:54:25,564 INFO L794 eck$LassoCheckResult]: Stem: 6914365#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 6914366#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 6915715#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6915716#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 6916019#L1143 assume 0 != main_~tmp~14; 6916020#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 6916332#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6915454#L250 assume !(0 == getOrigin_~person); 6914985#L254 assume !(1 == getOrigin_~person); 6914920#L258 assume !(2 == getOrigin_~person); 6914921#L262 assume !(3 == getOrigin_~person); 6915754#L266 assume !(4 == getOrigin_~person); 6915695#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6915696#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6913490#L1525 assume !(0 == initPersonOnFloor_~floor); 6913491#L1552 assume 1 == initPersonOnFloor_~floor; 6916612#L1553 assume !(0 == initPersonOnFloor_~person); 6916359#L1556 assume !(1 == initPersonOnFloor_~person); 6914485#L1559 assume !(2 == initPersonOnFloor_~person); 6914228#L1562 assume !(3 == initPersonOnFloor_~person); 6913584#L1565 assume !(4 == initPersonOnFloor_~person); 6913109#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 6913110#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6915646#L1317 assume !(0 == callOnFloor_~floorID); 6915984#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 6915985#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6917180#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6917179#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 6917178#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6917177#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6917176#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 6917174#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 6917173#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 6917171#L2875 assume !(0 != timeShift_~tmp___9~2); 6917170#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 6917169#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 6917168#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6917167#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 6917166#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 6917165#L2328 assume !(~currentFloorID~0 < 0); 6917164#L2343 assume !(~currentFloorID~0 < 0); 6917163#L2356 assume ~currentFloorID~0 < 1; 6917162#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 6917161#L1254-2 assume !(0 == isFloorCalling_~floorID); 6917160#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 6917159#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 6913485#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 6913246#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 6916922#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 6916923#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 6914291#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 6914292#L2698 assume !(0 != continueInDirection_~tmp~21); 6917140#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6965261#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6965260#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 6965259#L2174-6 assume !(1 == ~persons_0~0); 6965256#L2178-6 assume 1 == ~persons_1~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 6965254#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 6965252#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 6965248#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 6965238#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 6965237#L112-1 cleanup_~i~2 := 0; 6965234#L947-2 assume !false; 6965235#L948 [2018-11-28 12:54:25,564 INFO L796 eck$LassoCheckResult]: Loop: 6965235#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 7054935#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 7054875#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 7054871#L955 assume 1 != cleanup_~tmp___0~3; 7054866#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7054865#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7054630#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 7054597#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 7054579#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7054578#L1254-22 assume !(0 == isFloorCalling_~floorID); 7054546#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7053183#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 7013561#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7013562#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 7055821#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 7055820#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7055802#L1254-26 assume !(0 == isFloorCalling_~floorID); 7055753#L1258-26 assume !(1 == isFloorCalling_~floorID); 7055745#L1262-26 assume !(2 == isFloorCalling_~floorID); 7055741#L1266-26 assume !(3 == isFloorCalling_~floorID); 7055738#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7055734#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 7055727#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 7055716#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 7055709#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 7055703#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 7055696#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 7055688#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7055682#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 7055675#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 7055666#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 7055658#L2875-1 assume !(0 != timeShift_~tmp___9~2); 7055434#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7055431#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 7055429#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 7055427#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 7055425#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 7055421#L2328-2 assume !(~currentFloorID~0 < 0); 7055416#L2343-2 assume !(~currentFloorID~0 < 0); 7055412#L2356-2 assume !(~currentFloorID~0 < 1); 7055408#L2372-2 assume !(~currentFloorID~0 < 1); 7055404#L2385-2 assume ~currentFloorID~0 < 2; 7055401#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 7055398#L1254-29 assume !(0 == isFloorCalling_~floorID); 7055395#L1258-29 assume !(1 == isFloorCalling_~floorID); 7055392#L1262-29 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 7055389#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 7055359#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 7055352#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 7055348#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 7055344#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 7055340#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 7055336#L2698-9 assume !(0 != continueInDirection_~tmp~21); 7055331#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7055328#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7055326#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 7055325#L2174-13 assume !(1 == ~persons_0~0); 7055320#L2178-13 assume 1 == ~persons_1~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 7055319#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 7055318#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 7055309#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 7055299#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 7055292#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 7054940#L947-2 assume !false; 6965235#L948 [2018-11-28 12:54:25,564 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:25,564 INFO L82 PathProgramCache]: Analyzing trace with hash -1048806200, now seen corresponding path program 1 times [2018-11-28 12:54:25,564 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:25,565 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:25,565 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:25,565 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:54:25,565 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:25,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:25,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:25,619 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:25,619 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:25,619 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:54:25,619 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:54:25,619 INFO L82 PathProgramCache]: Analyzing trace with hash 1988657018, now seen corresponding path program 1 times [2018-11-28 12:54:25,619 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:54:25,619 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:54:25,620 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:25,620 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:54:25,620 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:54:25,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:54:25,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:54:25,666 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:54:25,666 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:54:25,666 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:54:25,666 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:54:25,666 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:54:25,666 INFO L87 Difference]: Start difference. First operand 473663 states and 870636 transitions. cyclomatic complexity: 396986 Second operand 6 states. [2018-11-28 12:54:32,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:54:32,540 INFO L93 Difference]: Finished difference Result 1844882 states and 3382049 transitions. [2018-11-28 12:54:32,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-28 12:54:32,541 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1844882 states and 3382049 transitions. [2018-11-28 12:54:50,256 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 1492920 [2018-11-28 12:54:54,470 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1844882 states to 1844882 states and 3382049 transitions. [2018-11-28 12:54:54,470 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1531635 [2018-11-28 12:54:55,268 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1531635 [2018-11-28 12:54:55,268 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1844882 states and 3382049 transitions. [2018-11-28 12:54:55,313 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:54:55,313 INFO L705 BuchiCegarLoop]: Abstraction has 1844882 states and 3382049 transitions. [2018-11-28 12:54:56,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1844882 states and 3382049 transitions. [2018-11-28 12:55:15,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1844882 to 1393844. [2018-11-28 12:55:15,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1393844 states. [2018-11-28 12:55:18,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1393844 states to 1393844 states and 2555201 transitions. [2018-11-28 12:55:18,445 INFO L728 BuchiCegarLoop]: Abstraction has 1393844 states and 2555201 transitions. [2018-11-28 12:55:18,445 INFO L608 BuchiCegarLoop]: Abstraction has 1393844 states and 2555201 transitions. [2018-11-28 12:55:18,445 INFO L442 BuchiCegarLoop]: ======== Iteration 38============ [2018-11-28 12:55:18,445 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 1393844 states and 2555201 transitions. [2018-11-28 12:55:28,552 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 1124895 [2018-11-28 12:55:28,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:55:28,552 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:55:28,552 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:55:28,553 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:55:28,553 INFO L794 eck$LassoCheckResult]: Stem: 9232926#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(21);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(25);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(30);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(9);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string105.base, #t~string105.offset := #Ultimate.alloc(10);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string107.base, #t~string107.offset, 1);call write~init~int(95, #t~string107.base, 1 + #t~string107.offset, 1);call write~init~int(93, #t~string107.base, 2 + #t~string107.offset, 1);call write~init~int(0, #t~string107.base, 3 + #t~string107.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(32, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string111.base, #t~string111.offset, 1);call write~init~int(97, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(116, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 3 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 4 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string113.base, #t~string113.offset, 1);call write~init~int(105, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 2 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(10);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string117.base, #t~string117.offset, 1);call write~init~int(112, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 2 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string119.base, #t~string119.offset, 1);call write~init~int(111, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(119, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(110, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string121.base, #t~string121.offset, 1);call write~init~int(73, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(76, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(95, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(112, #t~string121.base, 4 + #t~string121.offset, 1);call write~init~int(58, #t~string121.base, 5 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 6 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(37, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(105, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 3 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(70, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(95, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(112, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(58, #t~string133.base, 4 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 5 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string150.base, #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 1 + #t~string150.offset, 1); 9232927#L-1 havoc main_#res;havoc main_#t~ret57, main_~retValue_acc~7, main_~tmp~14;havoc main_~retValue_acc~7;havoc main_~tmp~14; 9234293#L1855 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 9234294#L1863 main_#t~ret57 := valid_product_#res;main_~tmp~14 := main_#t~ret57;havoc main_#t~ret57; 9234603#L1143 assume 0 != main_~tmp~14; 9234604#L1115 ~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 9234923#L59 havoc bigMacCall_#t~ret50, bigMacCall_~tmp~11;havoc bigMacCall_~tmp~11;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 9234018#L250 assume !(0 == getOrigin_~person); 9233551#L254 assume !(1 == getOrigin_~person); 9233483#L258 assume !(2 == getOrigin_~person); 9233484#L262 assume !(3 == getOrigin_~person); 9234333#L266 assume !(4 == getOrigin_~person); 9234269#L270 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 9234270#L275 bigMacCall_#t~ret50 := getOrigin_#res;bigMacCall_~tmp~11 := bigMacCall_#t~ret50;havoc bigMacCall_#t~ret50;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9232047#L1525 assume !(0 == initPersonOnFloor_~floor); 9232048#L1552 assume 1 == initPersonOnFloor_~floor; 9235224#L1553 assume !(0 == initPersonOnFloor_~person); 9234954#L1556 assume !(1 == initPersonOnFloor_~person); 9233048#L1559 assume !(2 == initPersonOnFloor_~person); 9232788#L1562 assume !(3 == initPersonOnFloor_~person); 9232139#L1565 assume !(4 == initPersonOnFloor_~person); 9231668#L1568 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 9231669#L1633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9234222#L1317 assume !(0 == callOnFloor_~floorID); 9234566#L1320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 9234567#L1329-2 havoc cleanup_#t~ret51, cleanup_#t~ret52, cleanup_~i~2, cleanup_~tmp~12, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~12;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9235623#L1254 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9235624#L1281 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 9235616#L2727 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 9235618#L2131 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 9233424#L2152 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 9233425#L2734 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 9235611#L2739 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9235612#L2875 assume !(0 != timeShift_~tmp___9~2); 9234926#L2966 assume 1 == ~doorState~0;~doorState~0 := 0; 9234927#L2966-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 9232013#L2318 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 9232014#L1828 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 9233793#L2322 assume !(0 != stopRequestedInDirection_~tmp~20); 9233794#L2328 assume !(~currentFloorID~0 < 0); 9235359#L2343 assume !(~currentFloorID~0 < 0); 9235360#L2356 assume ~currentFloorID~0 < 1; 9232126#L2358 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9232127#L1254-2 assume !(0 == isFloorCalling_~floorID); 9232480#L1258-2 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9232481#L1281-2 stopRequestedInDirection_#t~ret70 := isFloorCalling_#res;stopRequestedInDirection_~tmp___3~1 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 9232042#L2362 assume 0 != stopRequestedInDirection_~tmp___3~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 9231805#L2640 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 9235613#L2974 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 9235614#L2694 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 9232852#L1828-1 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 9232853#L2698 assume !(0 != continueInDirection_~tmp~21); 9235827#L2704-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9459130#L2710-5 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 9459129#L2114 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9459128#L2174-6 assume !(1 == ~persons_0~0); 9459127#L2178-6 assume !(1 == ~persons_1~0); 9459125#L2182-6 assume 1 == ~persons_2~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 9459123#L2206-6 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 9459121#L102 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 9459117#L2123 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 9459107#L112 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 9459106#L112-1 cleanup_~i~2 := 0; 9459104#L947-2 assume !false; 9459105#L948 [2018-11-28 12:55:28,553 INFO L796 eck$LassoCheckResult]: Loop: 9459105#L948 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 9707460#L951 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 9707458#L1937 cleanup_#t~ret51 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret51;havoc cleanup_#t~ret51; 9707456#L955 assume 1 != cleanup_~tmp___0~3; 9707454#L955-1 havoc isIdle_#res;havoc isIdle_#t~ret67, isIdle_~retValue_acc~20, isIdle_~tmp~19;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~19;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~18, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~18;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9707452#L1254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9707450#L1281-21 anyStopRequested_#t~ret62 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret62;havoc anyStopRequested_#t~ret62; 9706642#L2222 assume !(0 != anyStopRequested_~tmp___3~0); 9706639#L2226 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9706637#L1254-22 assume !(0 == isFloorCalling_~floorID); 9706636#L1258-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9706635#L1281-22 anyStopRequested_#t~ret63 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret63;havoc anyStopRequested_#t~ret63; 9706634#L2233 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 9698301#L2286 isIdle_#t~ret67 := anyStopRequested_#res;isIdle_~tmp~19 := isIdle_#t~ret67;havoc isIdle_#t~ret67;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~19 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 9706633#L2299 cleanup_#t~ret52 := isIdle_#res;cleanup_~tmp~12 := cleanup_#t~ret52;havoc cleanup_#t~ret52; 9706632#L967 assume !(0 != cleanup_~tmp~12);havoc timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_~tmp~24, timeShift_~tmp___0~9, timeShift_~tmp___1~7, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret80, stopRequestedAtCurrentFloor_#t~ret81, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~7;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9706631#L1254-26 assume !(0 == isFloorCalling_~floorID); 9667121#L1258-26 assume !(1 == isFloorCalling_~floorID); 9667122#L1262-26 assume !(2 == isFloorCalling_~floorID); 9708474#L1266-26 assume !(3 == isFloorCalling_~floorID); 9708469#L1270-26 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~8 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9708467#L1281-26 stopRequestedAtCurrentFloor_#t~ret80 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret80;havoc stopRequestedAtCurrentFloor_#t~ret80; 9708465#L2727-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 9708440#L2131-1 assume !(0 == buttonForFloorIsPressed_~floorID); 9708431#L2135-1 assume !(1 == buttonForFloorIsPressed_~floorID); 9708413#L2139-1 assume !(2 == buttonForFloorIsPressed_~floorID); 9708406#L2143-1 assume !(3 == buttonForFloorIsPressed_~floorID); 9708400#L2147-1 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~16 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 9708395#L2152-1 stopRequestedAtCurrentFloor_#t~ret81 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret81;havoc stopRequestedAtCurrentFloor_#t~ret81; 9708394#L2734-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 9708392#L2739-1 timeShift_#t~ret94 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret94;havoc timeShift_#t~ret94; 9708388#L2875-1 assume !(0 != timeShift_~tmp___9~2); 9707930#L2966-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9707926#L2966-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 9707923#L2318-2 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 9707920#L1828-5 stopRequestedInDirection_#t~ret68 := isTopFloor_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret68;havoc stopRequestedInDirection_#t~ret68; 9707917#L2322-2 assume !(0 != stopRequestedInDirection_~tmp~20); 9707913#L2328-2 assume !(~currentFloorID~0 < 0); 9707910#L2343-2 assume !(~currentFloorID~0 < 0); 9707904#L2356-2 assume !(~currentFloorID~0 < 1); 9707900#L2372-2 assume !(~currentFloorID~0 < 1); 9707897#L2385-2 assume ~currentFloorID~0 < 2; 9707894#L2387-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~8;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~8; 9707892#L1254-29 assume !(0 == isFloorCalling_~floorID); 9707889#L1258-29 assume !(1 == isFloorCalling_~floorID); 9707888#L1262-29 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~8 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~8; 9707886#L1281-29 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___2~2 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 9707627#L2391-2 assume 0 != stopRequestedInDirection_~tmp___2~2;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 9707623#L2640-2 timeShift_#t~ret101 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret101;havoc timeShift_#t~ret101; 9707525#L2974-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret79, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 9707524#L2694-3 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~10;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~10;isTopFloor_~retValue_acc~10 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~10; 9707522#L1828-6 continueInDirection_#t~ret79 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret79;havoc continueInDirection_#t~ret79; 9707520#L2698-9 assume !(0 != continueInDirection_~tmp~21); 9707514#L2704-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9707509#L2710-11 havoc __utac_acc__Specification9_spec__3_#t~ret0, __utac_acc__Specification9_spec__3_#t~ret1, __utac_acc__Specification9_spec__3_#t~ret2, __utac_acc__Specification9_spec__3_~floor~0, __utac_acc__Specification9_spec__3_~tmp~0, __utac_acc__Specification9_spec__3_~tmp___0~0, __utac_acc__Specification9_spec__3_~tmp___1~0;havoc __utac_acc__Specification9_spec__3_~floor~0;havoc __utac_acc__Specification9_spec__3_~tmp~0;havoc __utac_acc__Specification9_spec__3_~tmp___0~0;havoc __utac_acc__Specification9_spec__3_~tmp___1~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 9707507#L2114-1 __utac_acc__Specification9_spec__3_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification9_spec__3_~tmp~0 := __utac_acc__Specification9_spec__3_#t~ret0;havoc __utac_acc__Specification9_spec__3_#t~ret0;__utac_acc__Specification9_spec__3_~floor~0 := __utac_acc__Specification9_spec__3_~tmp~0;havoc isEmpty_#res;havoc isEmpty_~retValue_acc~18;havoc isEmpty_~retValue_acc~18; 9707503#L2174-13 assume !(1 == ~persons_0~0); 9707501#L2178-13 assume !(1 == ~persons_1~0); 9707498#L2182-13 assume 1 == ~persons_2~0;isEmpty_~retValue_acc~18 := 0;isEmpty_#res := isEmpty_~retValue_acc~18; 9707496#L2206-13 __utac_acc__Specification9_spec__3_#t~ret1 := isEmpty_#res;__utac_acc__Specification9_spec__3_~tmp___1~0 := __utac_acc__Specification9_spec__3_#t~ret1;havoc __utac_acc__Specification9_spec__3_#t~ret1; 9707495#L102-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~0);havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~15;havoc areDoorsOpen_~retValue_acc~15;areDoorsOpen_~retValue_acc~15 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~15; 9707477#L2123-1 __utac_acc__Specification9_spec__3_#t~ret2 := areDoorsOpen_#res;__utac_acc__Specification9_spec__3_~tmp___0~0 := __utac_acc__Specification9_spec__3_#t~ret2;havoc __utac_acc__Specification9_spec__3_#t~ret2; 9707467#L112-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~0); 9707465#L112-3 cleanup_~i~2 := 1 + cleanup_~i~2; 9707463#L947-2 assume !false; 9459105#L948 [2018-11-28 12:55:28,553 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:55:28,553 INFO L82 PathProgramCache]: Analyzing trace with hash 1207771482, now seen corresponding path program 1 times [2018-11-28 12:55:28,553 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:55:28,553 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:55:28,554 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:55:28,554 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:55:28,554 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:55:28,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:55:28,604 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:55:28,604 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:55:28,604 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:55:28,604 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:55:28,604 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:55:28,604 INFO L82 PathProgramCache]: Analyzing trace with hash 880036201, now seen corresponding path program 1 times [2018-11-28 12:55:28,604 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:55:28,605 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:55:28,605 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:55:28,605 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:55:28,605 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:55:28,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:55:28,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:55:28,673 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:55:28,673 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:55:28,673 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:55:28,673 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 12:55:28,673 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2018-11-28 12:55:28,673 INFO L87 Difference]: Start difference. First operand 1393844 states and 2555201 transitions. cyclomatic complexity: 1161370 Second operand 6 states. [2018-11-28 12:55:59,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:55:59,063 INFO L93 Difference]: Finished difference Result 5466341 states and 10002220 transitions. [2018-11-28 12:55:59,063 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-28 12:55:59,063 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 5466341 states and 10002220 transitions. [2018-11-28 12:57:07,323 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer has thrown an exception: java.lang.OutOfMemoryError: Java heap space at java.util.ArrayDeque.doubleCapacity(ArrayDeque.java:162) at java.util.ArrayDeque.addLast(ArrayDeque.java:252) at java.util.ArrayDeque.add(ArrayDeque.java:423) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates$AcceptingSummariesComputation.addNewDownStates(NestedWordAutomatonReachableStates.java:1854) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates$AcceptingSummariesComputation.init(NestedWordAutomatonReachableStates.java:1837) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates$AcceptingSummariesComputation.(NestedWordAutomatonReachableStates.java:1823) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates.computeAcceptingComponents(NestedWordAutomatonReachableStates.java:649) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates.getOrComputeAcceptingComponents(NestedWordAutomatonReachableStates.java:288) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates.computeNonLiveStates(NestedWordAutomatonReachableStates.java:662) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.RemoveNonLiveStates.(RemoveNonLiveStates.java:79) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiCegarLoop.reduceAbstractionSize(BuchiCegarLoop.java:686) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiCegarLoop.iterate(BuchiCegarLoop.java:551) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.doTerminationAnalysis(BuchiAutomizerObserver.java:145) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.finish(BuchiAutomizerObserver.java:384) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-28 12:57:07,325 INFO L168 Benchmark]: Toolchain (without parser) took 278684.76 ms. Allocated memory was 1.0 GB in the beginning and 11.5 GB in the end (delta: 10.4 GB). Free memory was 956.0 MB in the beginning and 1.3 GB in the end (delta: -308.1 MB). Peak memory consumption was 11.3 GB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,326 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.0 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 12:57:07,326 INFO L168 Benchmark]: CACSL2BoogieTranslator took 647.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -124.7 MB). Peak memory consumption was 48.5 MB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,326 INFO L168 Benchmark]: Boogie Procedure Inliner took 150.96 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 24.5 MB). Peak memory consumption was 24.5 MB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,327 INFO L168 Benchmark]: Boogie Preprocessor took 127.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 21.0 MB). Peak memory consumption was 21.0 MB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,501 INFO L168 Benchmark]: RCFGBuilder took 3531.52 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 174.1 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -228.6 MB). Peak memory consumption was 392.4 MB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,502 INFO L168 Benchmark]: BuchiAutomizer took 274225.01 ms. Allocated memory was 1.3 GB in the beginning and 11.5 GB in the end (delta: 10.1 GB). Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: -319.0 kB). Peak memory consumption was 11.3 GB. Max. memory is 11.5 GB. [2018-11-28 12:57:07,505 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.0 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 647.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -124.7 MB). Peak memory consumption was 48.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 150.96 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 24.5 MB). Peak memory consumption was 24.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 127.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 21.0 MB). Peak memory consumption was 21.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 3531.52 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 174.1 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -228.6 MB). Peak memory consumption was 392.4 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 274225.01 ms. Allocated memory was 1.3 GB in the beginning and 11.5 GB in the end (delta: 10.1 GB). Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: -319.0 kB). Peak memory consumption was 11.3 GB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: - ExceptionOrErrorResult: OutOfMemoryError: Java heap space de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: OutOfMemoryError: Java heap space: java.util.ArrayDeque.doubleCapacity(ArrayDeque.java:162) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...