./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 9ad7fb26 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-9ad7fb2 [2021-11-02 22:19:47,792 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-02 22:19:47,795 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-02 22:19:47,834 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-02 22:19:47,835 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-02 22:19:47,836 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-02 22:19:47,839 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-02 22:19:47,842 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-02 22:19:47,845 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-02 22:19:47,846 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-02 22:19:47,848 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-02 22:19:47,850 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-02 22:19:47,851 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-02 22:19:47,853 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-02 22:19:47,855 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-02 22:19:47,857 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-02 22:19:47,859 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-02 22:19:47,861 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-02 22:19:47,864 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-02 22:19:47,868 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-02 22:19:47,871 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-02 22:19:47,873 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-02 22:19:47,875 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-02 22:19:47,877 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-02 22:19:47,882 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-02 22:19:47,883 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-02 22:19:47,883 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-02 22:19:47,885 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-02 22:19:47,885 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-02 22:19:47,887 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-02 22:19:47,888 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-02 22:19:47,889 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-02 22:19:47,891 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-02 22:19:47,892 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-02 22:19:47,894 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-02 22:19:47,895 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-02 22:19:47,896 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-02 22:19:47,897 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-02 22:19:47,897 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-02 22:19:47,898 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-02 22:19:47,900 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-02 22:19:47,901 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-02 22:19:47,941 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-02 22:19:47,942 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-02 22:19:47,942 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-02 22:19:47,942 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-02 22:19:47,944 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-02 22:19:47,944 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-02 22:19:47,944 INFO L138 SettingsManager]: * Use SBE=true [2021-11-02 22:19:47,945 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-02 22:19:47,945 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-02 22:19:47,945 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-02 22:19:47,945 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-02 22:19:47,946 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-02 22:19:47,953 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-02 22:19:47,953 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-02 22:19:47,953 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-02 22:19:47,953 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-02 22:19:47,954 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-02 22:19:47,954 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-02 22:19:47,954 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-02 22:19:47,955 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-02 22:19:47,955 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-02 22:19:47,955 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-02 22:19:47,955 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-02 22:19:47,956 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-02 22:19:47,956 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-02 22:19:47,957 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-02 22:19:47,959 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-02 22:19:47,959 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-02 22:19:47,960 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-02 22:19:47,961 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-02 22:19:47,961 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-02 22:19:47,962 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-02 22:19:47,963 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-02 22:19:47,963 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 09d600be73ca435c113b9c0e8e087d96a910d62ea2126c235d6963c00b3a91c2 [2021-11-02 22:19:48,426 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-02 22:19:48,456 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-02 22:19:48,460 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-02 22:19:48,462 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-02 22:19:48,464 INFO L275 PluginConnector]: CDTParser initialized [2021-11-02 22:19:48,465 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/../../sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2021-11-02 22:19:48,572 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/data/dc36c46df/fb5a38c57d6246b68fad4d681c8102e1/FLAG8132dedce [2021-11-02 22:19:49,563 INFO L306 CDTParser]: Found 1 translation units. [2021-11-02 22:19:49,564 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c [2021-11-02 22:19:49,589 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/data/dc36c46df/fb5a38c57d6246b68fad4d681c8102e1/FLAG8132dedce [2021-11-02 22:19:49,640 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/data/dc36c46df/fb5a38c57d6246b68fad4d681c8102e1 [2021-11-02 22:19:49,643 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-02 22:19:49,647 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-02 22:19:49,653 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-02 22:19:49,653 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-02 22:19:49,658 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-02 22:19:49,659 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:19:49" (1/1) ... [2021-11-02 22:19:49,661 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16e82404 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:49, skipping insertion in model container [2021-11-02 22:19:49,661 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:19:49" (1/1) ... [2021-11-02 22:19:49,671 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-02 22:19:49,769 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-02 22:19:50,163 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2021-11-02 22:19:50,476 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:19:50,496 INFO L203 MainTranslator]: Completed pre-run [2021-11-02 22:19:50,565 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/sv-benchmarks/c/product-lines/elevator_spec1_product17.cil.c[27470,27483] [2021-11-02 22:19:50,665 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:19:50,703 INFO L208 MainTranslator]: Completed translation [2021-11-02 22:19:50,703 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50 WrapperNode [2021-11-02 22:19:50,704 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-02 22:19:50,705 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-02 22:19:50,705 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-02 22:19:50,706 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-02 22:19:50,715 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:50,767 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,011 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-02 22:19:51,013 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-02 22:19:51,013 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-02 22:19:51,013 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-02 22:19:51,025 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,025 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,074 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,074 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,182 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,245 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,258 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,282 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-02 22:19:51,284 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-02 22:19:51,284 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-02 22:19:51,284 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-02 22:19:51,286 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (1/1) ... [2021-11-02 22:19:51,295 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:19:51,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:19:51,324 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:19:51,343 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd3a47df-4cda-42d5-9a38-64c6c20237b9/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-02 22:19:51,387 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-02 22:19:51,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-02 22:19:51,388 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-02 22:19:51,388 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-02 22:19:57,658 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-02 22:19:57,659 INFO L299 CfgBuilder]: Removed 541 assume(true) statements. [2021-11-02 22:19:57,665 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:19:57 BoogieIcfgContainer [2021-11-02 22:19:57,665 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-02 22:19:57,667 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-02 22:19:57,667 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-02 22:19:57,672 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-02 22:19:57,673 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:19:57,673 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 10:19:49" (1/3) ... [2021-11-02 22:19:57,675 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5590d886 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:19:57, skipping insertion in model container [2021-11-02 22:19:57,675 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:19:57,675 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:19:50" (2/3) ... [2021-11-02 22:19:57,676 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5590d886 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:19:57, skipping insertion in model container [2021-11-02 22:19:57,676 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:19:57,676 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:19:57" (3/3) ... [2021-11-02 22:19:57,678 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product17.cil.c [2021-11-02 22:19:57,747 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-02 22:19:57,747 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-02 22:19:57,747 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-02 22:19:57,748 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-02 22:19:57,748 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-02 22:19:57,748 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-02 22:19:57,748 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-02 22:19:57,748 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-02 22:19:57,830 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2398 states, 2397 states have (on average 1.8919482686691698) internal successors, (4535), 2397 states have internal predecessors, (4535), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:19:58,021 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1159 [2021-11-02 22:19:58,022 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:19:58,022 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:19:58,049 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:19:58,050 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:19:58,050 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-02 22:19:58,060 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2398 states, 2397 states have (on average 1.8919482686691698) internal successors, (4535), 2397 states have internal predecessors, (4535), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:19:58,123 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1159 [2021-11-02 22:19:58,123 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:19:58,124 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:19:58,135 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:19:58,135 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:19:58,155 INFO L791 eck$LassoCheckResult]: Stem: 527#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 2288#L-1true havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 126#L1138true havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 407#L1146true main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 2013#L3215true assume 0 != main_~tmp~24; 1043#L3190true ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2148#L2619true havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1335#L3272true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 603#L3297true bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1136#L414true assume 0 == initPersonOnFloor_~floor; 1290#L415true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 570#L522-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 939#L2626true assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1197#L2638-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 14#L218-2true havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 858#L3272-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 984#L3297-1true angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 464#L414-1true assume 0 == initPersonOnFloor_~floor; 1932#L415-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1241#L522-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1356#L2626-2true assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1187#L2638-5true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1473#L218-5true havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 199#L138true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 712#L165true stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1977#L1999true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 2056#L2011true timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 539#L2148true assume !(0 != timeShift_~tmp___9~2); 1119#L2239true assume !(1 == ~doorState~0); 96#L2239-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1786#L1590true assume !(1 == stopRequestedInDirection_~dir); 269#L1759true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1448#L1912true timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1597#L2247true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1948#L1966true assume !(1 == ~currentHeading~0); 1141#L1976true assume !(0 == ~currentFloorID~0); 705#L1976-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2117#L1982-5true havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 311#L1386true __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 2016#L2664true assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 2244#L2665true assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1216#L1395true __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1878#L2669true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 694#L2724true cleanup_~i~3 := 0; 921#L3022-2true [2021-11-02 22:19:58,166 INFO L793 eck$LassoCheckResult]: Loop: 921#L3022-2true assume !false; 1347#L3023true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 79#L3026true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1862#L1233true cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 700#L3030true assume 1 != cleanup_~tmp___0~9; 184#L3030-1true havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1557#L138-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1381#L165-21true anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1407#L1494true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1331#L1558true isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1409#L1571true cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 438#L3042true assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 884#L138-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 226#L165-26true stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 685#L1999-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1304#L2011-1true timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 474#L2148-1true assume !(0 != timeShift_~tmp___9~2); 532#L2239-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1682#L2239-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2054#L1590-2true assume !(1 == stopRequestedInDirection_~dir); 2116#L1759-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 322#L1912-2true timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 120#L2247-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 38#L1966-3true assume !(1 == ~currentHeading~0); 2045#L1976-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 677#L1976-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2233#L1982-11true havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 2043#L1386-1true __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 160#L2664-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1257#L2665-1true assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1030#L1395-5true __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 260#L2669-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1140#L2724-1true cleanup_~i~3 := 1 + cleanup_~i~3; 921#L3022-2true [2021-11-02 22:19:58,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:19:58,175 INFO L85 PathProgramCache]: Analyzing trace with hash -1587575619, now seen corresponding path program 1 times [2021-11-02 22:19:58,187 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:19:58,188 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868470921] [2021-11-02 22:19:58,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:19:58,189 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:19:58,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:19:58,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:19:58,763 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:19:58,763 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868470921] [2021-11-02 22:19:58,765 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868470921] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:19:58,766 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:19:58,766 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:19:58,769 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661806411] [2021-11-02 22:19:58,786 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:19:58,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:19:58,787 INFO L85 PathProgramCache]: Analyzing trace with hash 391261476, now seen corresponding path program 1 times [2021-11-02 22:19:58,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:19:58,788 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379318002] [2021-11-02 22:19:58,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:19:58,789 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:19:58,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:19:58,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:19:58,933 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:19:58,934 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379318002] [2021-11-02 22:19:58,934 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379318002] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:19:58,935 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:19:58,935 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:19:58,935 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260050160] [2021-11-02 22:19:58,936 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:19:58,938 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:19:58,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:19:58,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:19:58,967 INFO L87 Difference]: Start difference. First operand has 2398 states, 2397 states have (on average 1.8919482686691698) internal successors, (4535), 2397 states have internal predecessors, (4535), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:19:59,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:19:59,547 INFO L93 Difference]: Finished difference Result 6241 states and 11708 transitions. [2021-11-02 22:19:59,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:19:59,550 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 6241 states and 11708 transitions. [2021-11-02 22:19:59,648 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4086 [2021-11-02 22:19:59,756 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 6241 states to 6157 states and 11611 transitions. [2021-11-02 22:19:59,758 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 6157 [2021-11-02 22:19:59,771 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 6157 [2021-11-02 22:19:59,772 INFO L73 IsDeterministic]: Start isDeterministic. Operand 6157 states and 11611 transitions. [2021-11-02 22:19:59,800 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:19:59,801 INFO L681 BuchiCegarLoop]: Abstraction has 6157 states and 11611 transitions. [2021-11-02 22:19:59,834 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6157 states and 11611 transitions. [2021-11-02 22:19:59,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6157 to 2388. [2021-11-02 22:19:59,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2388 states, 2388 states have (on average 1.8907035175879396) internal successors, (4515), 2387 states have internal predecessors, (4515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:00,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2388 states to 2388 states and 4515 transitions. [2021-11-02 22:20:00,002 INFO L704 BuchiCegarLoop]: Abstraction has 2388 states and 4515 transitions. [2021-11-02 22:20:00,002 INFO L587 BuchiCegarLoop]: Abstraction has 2388 states and 4515 transitions. [2021-11-02 22:20:00,002 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-02 22:20:00,002 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2388 states and 4515 transitions. [2021-11-02 22:20:00,062 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1161 [2021-11-02 22:20:00,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:00,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:00,069 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:00,069 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:00,070 INFO L791 eck$LassoCheckResult]: Stem: 9702#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 9703#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 8964#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 8965#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 9503#L3215 assume 0 != main_~tmp~24; 10376#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 10377#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 10651#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 9648#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9816#L414 assume 0 == initPersonOnFloor_~floor; 10474#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8810#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 9771#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 9662#L2638-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8693#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 8694#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 8707#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9592#L414-1 assume 0 == initPersonOnFloor_~floor; 9593#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9094#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 10574#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 9642#L2638-5 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9523#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 9121#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 9123#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 9965#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 10312#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 8826#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 10335#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 10337#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 11049#L2148 assume !(0 != timeShift_~tmp___9~2); 10459#L2239 assume !(1 == ~doorState~0); 8900#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 8901#L1590 assume !(1 == stopRequestedInDirection_~dir); 9256#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 9049#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 10720#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 10817#L1966 assume !(1 == ~currentHeading~0); 10476#L1976 assume !(0 == ~currentFloorID~0); 9368#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9160#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 9337#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 9338#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 10990#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 10553#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 10554#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 8927#L2724 cleanup_~i~3 := 0; 9941#L3022-2 [2021-11-02 22:20:00,071 INFO L793 eck$LassoCheckResult]: Loop: 9941#L3022-2 assume !false; 10246#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 8862#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 8863#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 9948#L3030 assume 1 != cleanup_~tmp___0~9; 9089#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 9090#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 10084#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 10676#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 8713#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 10647#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 9550#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 9551#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 8931#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 9177#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 9928#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 8995#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 8996#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 10622#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 10623#L2148-1 assume !(0 != timeShift_~tmp___9~2); 9709#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9710#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 10858#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 10999#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 9007#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 8951#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 8756#L1966-3 assume !(1 == ~currentHeading~0); 8757#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9916#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8963#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 10996#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 9043#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 9044#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 10358#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 9241#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 9242#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 9941#L3022-2 [2021-11-02 22:20:00,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:00,073 INFO L85 PathProgramCache]: Analyzing trace with hash 2053327665, now seen corresponding path program 1 times [2021-11-02 22:20:00,073 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:00,074 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1527932220] [2021-11-02 22:20:00,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:00,074 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:00,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:00,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:00,229 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:00,229 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1527932220] [2021-11-02 22:20:00,229 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1527932220] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:00,230 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:00,230 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:00,230 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1153875563] [2021-11-02 22:20:00,231 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:00,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:00,232 INFO L85 PathProgramCache]: Analyzing trace with hash 1294299766, now seen corresponding path program 1 times [2021-11-02 22:20:00,233 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:00,233 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1534036271] [2021-11-02 22:20:00,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:00,234 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:00,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:00,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:00,303 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:00,311 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1534036271] [2021-11-02 22:20:00,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1534036271] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:00,312 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:00,312 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:00,312 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182542617] [2021-11-02 22:20:00,313 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:00,313 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:00,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:20:00,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:20:00,314 INFO L87 Difference]: Start difference. First operand 2388 states and 4515 transitions. cyclomatic complexity: 2128 Second operand has 7 states, 7 states have (on average 5.142857142857143) internal successors, (36), 7 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:04,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:04,571 INFO L93 Difference]: Finished difference Result 21959 states and 41404 transitions. [2021-11-02 22:20:04,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-11-02 22:20:04,573 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21959 states and 41404 transitions. [2021-11-02 22:20:04,790 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14475 [2021-11-02 22:20:05,012 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21959 states to 21959 states and 41404 transitions. [2021-11-02 22:20:05,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21959 [2021-11-02 22:20:05,053 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21959 [2021-11-02 22:20:05,054 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21959 states and 41404 transitions. [2021-11-02 22:20:05,094 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:05,094 INFO L681 BuchiCegarLoop]: Abstraction has 21959 states and 41404 transitions. [2021-11-02 22:20:05,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21959 states and 41404 transitions. [2021-11-02 22:20:05,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21959 to 4724. [2021-11-02 22:20:05,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4724 states, 4724 states have (on average 1.8899237933954276) internal successors, (8928), 4723 states have internal predecessors, (8928), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:05,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4724 states to 4724 states and 8928 transitions. [2021-11-02 22:20:05,564 INFO L704 BuchiCegarLoop]: Abstraction has 4724 states and 8928 transitions. [2021-11-02 22:20:05,564 INFO L587 BuchiCegarLoop]: Abstraction has 4724 states and 8928 transitions. [2021-11-02 22:20:05,564 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-02 22:20:05,565 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4724 states and 8928 transitions. [2021-11-02 22:20:05,590 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2328 [2021-11-02 22:20:05,590 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:05,591 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:05,596 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:05,596 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:05,597 INFO L791 eck$LassoCheckResult]: Stem: 34108#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 34109#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 33358#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 33359#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 33906#L3215 assume 0 != main_~tmp~24; 34811#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 34812#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 35103#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 34054#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 34225#L414 assume 0 == initPersonOnFloor_~floor; 34911#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 33204#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 34178#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 34068#L2638-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 33087#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 33088#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 33101#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 34745#L414-1 assume 0 == initPersonOnFloor_~floor; 35479#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 33490#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 35114#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 34048#L2638-5 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 33926#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 33517#L138 assume !(0 == isFloorCalling_~floorID); 33518#L142 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 35785#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 35784#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 35783#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 35778#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 35777#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 35776#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 35774#L2148 assume !(0 != timeShift_~tmp___9~2); 35773#L2239 assume !(1 == ~doorState~0); 35772#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 35771#L1590 assume !(1 == stopRequestedInDirection_~dir); 33654#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 33444#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 35189#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 35301#L1966 assume !(1 == ~currentHeading~0); 34915#L1976 assume !(0 == ~currentFloorID~0); 33768#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35743#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 35742#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 35741#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 35740#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 35737#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 35730#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 35721#L2724 cleanup_~i~3 := 0; 35719#L3022-2 [2021-11-02 22:20:05,597 INFO L793 eck$LassoCheckResult]: Loop: 35719#L3022-2 assume !false; 35718#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 35717#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 35716#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 35715#L3030 assume 1 != cleanup_~tmp___0~9; 35675#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 35271#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 35132#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 35133#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 35153#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 35676#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 35672#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 34624#L138-26 assume !(0 == isFloorCalling_~floorID); 34625#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 36812#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 36811#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 36809#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 36805#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 36804#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 36803#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 36801#L2148-1 assume !(0 != timeShift_~tmp___9~2); 36800#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 36799#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 36797#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 36778#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 36776#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 36775#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 36774#L1966-3 assume !(1 == ~currentHeading~0); 35528#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 35529#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 36766#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 36765#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 36764#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 36761#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 36757#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 36747#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 35720#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 35719#L3022-2 [2021-11-02 22:20:05,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:05,598 INFO L85 PathProgramCache]: Analyzing trace with hash -50949993, now seen corresponding path program 1 times [2021-11-02 22:20:05,599 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:05,599 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1724842668] [2021-11-02 22:20:05,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:05,600 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:05,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:05,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:05,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:05,741 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1724842668] [2021-11-02 22:20:05,741 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1724842668] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:05,741 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:05,741 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:05,742 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282005662] [2021-11-02 22:20:05,742 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:05,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:05,744 INFO L85 PathProgramCache]: Analyzing trace with hash 2038034558, now seen corresponding path program 1 times [2021-11-02 22:20:05,745 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:05,746 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586714051] [2021-11-02 22:20:05,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:05,746 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:05,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:05,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:05,819 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:05,820 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586714051] [2021-11-02 22:20:05,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586714051] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:05,821 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:05,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:05,822 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1031778661] [2021-11-02 22:20:05,823 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:05,823 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:05,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:20:05,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:20:05,824 INFO L87 Difference]: Start difference. First operand 4724 states and 8928 transitions. cyclomatic complexity: 4205 Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:10,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:10,105 INFO L93 Difference]: Finished difference Result 16361 states and 30836 transitions. [2021-11-02 22:20:10,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:10,106 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16361 states and 30836 transitions. [2021-11-02 22:20:10,228 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8731 [2021-11-02 22:20:10,327 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16361 states to 16361 states and 30836 transitions. [2021-11-02 22:20:10,327 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16361 [2021-11-02 22:20:10,358 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16361 [2021-11-02 22:20:10,358 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16361 states and 30836 transitions. [2021-11-02 22:20:10,382 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:10,382 INFO L681 BuchiCegarLoop]: Abstraction has 16361 states and 30836 transitions. [2021-11-02 22:20:10,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16361 states and 30836 transitions. [2021-11-02 22:20:10,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16361 to 8390. [2021-11-02 22:20:10,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8390 states, 8390 states have (on average 1.8868891537544696) internal successors, (15831), 8389 states have internal predecessors, (15831), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:10,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8390 states to 8390 states and 15831 transitions. [2021-11-02 22:20:10,917 INFO L704 BuchiCegarLoop]: Abstraction has 8390 states and 15831 transitions. [2021-11-02 22:20:10,917 INFO L587 BuchiCegarLoop]: Abstraction has 8390 states and 15831 transitions. [2021-11-02 22:20:10,917 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-02 22:20:10,917 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8390 states and 15831 transitions. [2021-11-02 22:20:10,950 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4213 [2021-11-02 22:20:10,950 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:10,950 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:10,954 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:10,954 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:10,955 INFO L791 eck$LassoCheckResult]: Stem: 55223#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 55224#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 54465#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 54466#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 55021#L3215 assume 0 != main_~tmp~24; 55920#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 55921#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 56217#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 55169#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55339#L414 assume 0 == initPersonOnFloor_~floor; 56023#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 54310#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 55294#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 55183#L2638-2 assume !(0 == callOnFloor_~floorID); 56083#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 54193#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 54194#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 54207#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55113#L414-1 assume 0 == initPersonOnFloor_~floor; 55114#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 56129#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 56130#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 56070#L2638-5 assume !(0 == callOnFloor_~floorID); 56071#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 56321#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56322#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56725#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 56837#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 56834#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 56836#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 60165#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 60164#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 60157#L2148 assume !(0 != timeShift_~tmp___9~2); 56008#L2239 assume !(1 == ~doorState~0); 54400#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54401#L1590 assume !(1 == stopRequestedInDirection_~dir); 56519#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 62517#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 62514#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 56594#L1966 assume !(1 == ~currentHeading~0); 56595#L1976 assume !(0 == ~currentFloorID~0); 54882#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58754#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 58480#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 56897#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 56884#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 56881#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 56863#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 56843#L2724 cleanup_~i~3 := 0; 56841#L3022-2 [2021-11-02 22:20:10,955 INFO L793 eck$LassoCheckResult]: Loop: 56841#L3022-2 assume !false; 56840#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 56839#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 56833#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 56830#L3030 assume 1 != cleanup_~tmp___0~9; 56825#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56824#L138-21 assume !(0 == isFloorCalling_~floorID); 56805#L142-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56797#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 56783#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 56782#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 56781#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 56780#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56779#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56778#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 56776#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 56773#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 56774#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 58121#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 58115#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 58113#L2148-1 assume !(0 != timeShift_~tmp___9~2); 55230#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 55231#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 56459#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 56635#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 54630#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 54452#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 54256#L1966-3 assume !(1 == ~currentHeading~0); 54257#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 56632#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56876#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 56873#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 56870#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 56869#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 56867#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 56846#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 56842#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 56841#L3022-2 [2021-11-02 22:20:10,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:10,956 INFO L85 PathProgramCache]: Analyzing trace with hash -719546396, now seen corresponding path program 1 times [2021-11-02 22:20:10,957 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:10,957 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [481356232] [2021-11-02 22:20:10,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:10,957 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:10,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:11,025 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:11,025 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:11,025 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [481356232] [2021-11-02 22:20:11,026 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [481356232] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:11,026 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:11,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:11,027 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561840447] [2021-11-02 22:20:11,027 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:11,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:11,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1837073648, now seen corresponding path program 1 times [2021-11-02 22:20:11,028 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:11,028 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280332220] [2021-11-02 22:20:11,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:11,029 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:11,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:11,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:11,050 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:11,050 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280332220] [2021-11-02 22:20:11,051 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280332220] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:11,051 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:11,051 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:11,052 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [527439072] [2021-11-02 22:20:11,052 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:11,052 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:11,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:20:11,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:20:11,054 INFO L87 Difference]: Start difference. First operand 8390 states and 15831 transitions. cyclomatic complexity: 7442 Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:11,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:11,653 INFO L93 Difference]: Finished difference Result 9144 states and 17135 transitions. [2021-11-02 22:20:11,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:20:11,653 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9144 states and 17135 transitions. [2021-11-02 22:20:11,693 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4566 [2021-11-02 22:20:11,805 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9144 states to 9144 states and 17135 transitions. [2021-11-02 22:20:11,805 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9144 [2021-11-02 22:20:11,814 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9144 [2021-11-02 22:20:11,815 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9144 states and 17135 transitions. [2021-11-02 22:20:11,824 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:11,825 INFO L681 BuchiCegarLoop]: Abstraction has 9144 states and 17135 transitions. [2021-11-02 22:20:11,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9144 states and 17135 transitions. [2021-11-02 22:20:11,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9144 to 8236. [2021-11-02 22:20:11,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8236 states, 8236 states have (on average 1.8838028169014085) internal successors, (15515), 8235 states have internal predecessors, (15515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:12,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8236 states to 8236 states and 15515 transitions. [2021-11-02 22:20:12,007 INFO L704 BuchiCegarLoop]: Abstraction has 8236 states and 15515 transitions. [2021-11-02 22:20:12,007 INFO L587 BuchiCegarLoop]: Abstraction has 8236 states and 15515 transitions. [2021-11-02 22:20:12,007 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-02 22:20:12,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8236 states and 15515 transitions. [2021-11-02 22:20:12,036 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4091 [2021-11-02 22:20:12,036 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:12,036 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:12,042 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:12,044 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:12,047 INFO L791 eck$LassoCheckResult]: Stem: 72741#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 72742#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 72002#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 72003#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 72541#L3215 assume 0 != main_~tmp~24; 73426#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 73427#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 73709#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 72687#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 72855#L414 assume 0 == initPersonOnFloor_~floor; 73520#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 71851#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 72810#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 72701#L2638-2 assume !(0 == callOnFloor_~floorID); 73578#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 71734#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 71735#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 71751#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 72634#L414-1 assume 0 == initPersonOnFloor_~floor; 72635#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 73627#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 73628#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 76619#L2638-5 assume !(0 == callOnFloor_~floorID); 76617#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 76614#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 76612#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 76613#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 77556#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 73364#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 71867#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 73384#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 73386#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 74211#L2148 assume !(0 != timeShift_~tmp___9~2); 74213#L2239 assume !(1 == ~doorState~0); 79454#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 79452#L1590 assume !(1 == stopRequestedInDirection_~dir); 79449#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 79389#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 79386#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 79384#L1966 assume !(1 == ~currentHeading~0); 79380#L1976 assume !(0 == ~currentFloorID~0); 78450#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 78449#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 78448#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 78447#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 78445#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 78446#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 77592#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 77583#L2724 cleanup_~i~3 := 0; 77581#L3022-2 [2021-11-02 22:20:12,047 INFO L793 eck$LassoCheckResult]: Loop: 77581#L3022-2 assume !false; 77580#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 77579#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 77578#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 74203#L3030 assume 1 != cleanup_~tmp___0~9; 74204#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 74197#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 74198#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 74192#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 74194#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 74217#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 74216#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 74210#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 74208#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 74207#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 74206#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 74205#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 72032#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 72033#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 73781#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 74201#L2148-1 assume !(0 != timeShift_~tmp___9~2); 74202#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 79675#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 79674#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 79641#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 79632#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 79630#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 79629#L1966-3 assume !(1 == ~currentHeading~0); 79628#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 74100#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 77616#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 77615#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 77614#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 77612#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 77613#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 77597#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 77582#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 77581#L3022-2 [2021-11-02 22:20:12,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:12,048 INFO L85 PathProgramCache]: Analyzing trace with hash -719546396, now seen corresponding path program 2 times [2021-11-02 22:20:12,048 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:12,048 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109045113] [2021-11-02 22:20:12,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:12,049 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:12,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:12,114 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:12,114 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:12,115 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109045113] [2021-11-02 22:20:12,115 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109045113] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:12,115 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:12,115 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:12,116 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049464485] [2021-11-02 22:20:12,116 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:12,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:12,117 INFO L85 PathProgramCache]: Analyzing trace with hash -752661349, now seen corresponding path program 1 times [2021-11-02 22:20:12,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:12,117 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343124959] [2021-11-02 22:20:12,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:12,118 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:12,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:12,156 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:12,156 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:12,156 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343124959] [2021-11-02 22:20:12,157 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343124959] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:12,157 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:12,157 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:12,157 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248129257] [2021-11-02 22:20:12,158 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:12,158 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:12,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:20:12,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:20:12,160 INFO L87 Difference]: Start difference. First operand 8236 states and 15515 transitions. cyclomatic complexity: 7280 Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:13,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:13,126 INFO L93 Difference]: Finished difference Result 31924 states and 60178 transitions. [2021-11-02 22:20:13,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:13,127 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31924 states and 60178 transitions. [2021-11-02 22:20:13,424 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20902 [2021-11-02 22:20:13,649 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31924 states to 31924 states and 60178 transitions. [2021-11-02 22:20:13,649 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31924 [2021-11-02 22:20:13,680 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31924 [2021-11-02 22:20:13,681 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31924 states and 60178 transitions. [2021-11-02 22:20:13,714 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:13,715 INFO L681 BuchiCegarLoop]: Abstraction has 31924 states and 60178 transitions. [2021-11-02 22:20:13,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31924 states and 60178 transitions. [2021-11-02 22:20:14,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31924 to 14903. [2021-11-02 22:20:14,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14903 states, 14903 states have (on average 1.8830436824800376) internal successors, (28063), 14902 states have internal predecessors, (28063), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:14,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14903 states to 14903 states and 28063 transitions. [2021-11-02 22:20:14,237 INFO L704 BuchiCegarLoop]: Abstraction has 14903 states and 28063 transitions. [2021-11-02 22:20:14,237 INFO L587 BuchiCegarLoop]: Abstraction has 14903 states and 28063 transitions. [2021-11-02 22:20:14,237 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-02 22:20:14,237 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14903 states and 28063 transitions. [2021-11-02 22:20:14,292 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8120 [2021-11-02 22:20:14,293 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:14,293 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:14,302 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:14,302 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:14,303 INFO L791 eck$LassoCheckResult]: Stem: 112934#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 112935#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 112184#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 112185#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 112732#L3215 assume 0 != main_~tmp~24; 113644#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 113645#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 113947#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 112880#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 113054#L414 assume 0 == initPersonOnFloor_~floor; 113746#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 112032#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 113007#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 112894#L2638-2 assume !(0 == callOnFloor_~floorID); 113807#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 113255#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 113431#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 111929#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 112825#L414-1 assume 0 == initPersonOnFloor_~floor; 112826#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 113856#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 113857#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 113796#L2638-5 assume !(0 == callOnFloor_~floorID); 113797#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 114055#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 114056#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 114501#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 114500#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 114497#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 114499#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 114908#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 114906#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 114905#L2148 assume !(0 != timeShift_~tmp___9~2); 114904#L2239 assume !(1 == ~doorState~0); 114903#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 114879#L1590 assume !(1 == stopRequestedInDirection_~dir); 114870#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 114850#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 114846#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 114847#L1966 assume !(1 == ~currentHeading~0); 115201#L1976 assume !(0 == ~currentFloorID~0); 115202#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121237#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 121236#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 121235#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 121234#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 121231#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 121224#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 121215#L2724 cleanup_~i~3 := 0; 121212#L3022-2 [2021-11-02 22:20:14,303 INFO L793 eck$LassoCheckResult]: Loop: 121212#L3022-2 assume !false; 121210#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 121208#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 121206#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 121204#L3030 assume 1 != cleanup_~tmp___0~9; 121202#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 121200#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 120714#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 115231#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 115230#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 115218#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 115189#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 115181#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 114917#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 114772#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 114735#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 114732#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 114729#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 114727#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 114725#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 114719#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 114712#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 114711#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 114708#L2148-1 assume !(0 != timeShift_~tmp___9~2); 114706#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 114705#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 114681#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 114682#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 114648#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 114649#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 114915#L1966-3 assume !(1 == ~currentHeading~0); 114916#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 113163#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 112183#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 114391#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 112262#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 112263#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 113875#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 122795#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 121214#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 121212#L3022-2 [2021-11-02 22:20:14,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:14,304 INFO L85 PathProgramCache]: Analyzing trace with hash -719546396, now seen corresponding path program 3 times [2021-11-02 22:20:14,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:14,305 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1959218503] [2021-11-02 22:20:14,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:14,305 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:14,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:14,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:14,396 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:14,396 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1959218503] [2021-11-02 22:20:14,397 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1959218503] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:14,397 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:14,397 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:14,397 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1575980499] [2021-11-02 22:20:14,398 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:14,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:14,399 INFO L85 PathProgramCache]: Analyzing trace with hash 1114725390, now seen corresponding path program 1 times [2021-11-02 22:20:14,399 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:14,401 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [951622240] [2021-11-02 22:20:14,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:14,401 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:14,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:14,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:14,437 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:14,446 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [951622240] [2021-11-02 22:20:14,446 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [951622240] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:14,447 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:14,447 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:14,448 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87225522] [2021-11-02 22:20:14,448 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:14,449 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:14,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:20:14,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:20:14,452 INFO L87 Difference]: Start difference. First operand 14903 states and 28063 transitions. cyclomatic complexity: 13161 Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:15,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:15,282 INFO L93 Difference]: Finished difference Result 22445 states and 42106 transitions. [2021-11-02 22:20:15,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:20:15,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22445 states and 42106 transitions. [2021-11-02 22:20:15,542 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12244 [2021-11-02 22:20:15,647 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22445 states to 22445 states and 42106 transitions. [2021-11-02 22:20:15,647 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22445 [2021-11-02 22:20:15,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22445 [2021-11-02 22:20:15,673 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22445 states and 42106 transitions. [2021-11-02 22:20:15,701 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:15,701 INFO L681 BuchiCegarLoop]: Abstraction has 22445 states and 42106 transitions. [2021-11-02 22:20:15,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22445 states and 42106 transitions. [2021-11-02 22:20:16,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22445 to 14903. [2021-11-02 22:20:16,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14903 states, 14903 states have (on average 1.8733811984164261) internal successors, (27919), 14902 states have internal predecessors, (27919), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:16,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14903 states to 14903 states and 27919 transitions. [2021-11-02 22:20:16,125 INFO L704 BuchiCegarLoop]: Abstraction has 14903 states and 27919 transitions. [2021-11-02 22:20:16,125 INFO L587 BuchiCegarLoop]: Abstraction has 14903 states and 27919 transitions. [2021-11-02 22:20:16,125 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-02 22:20:16,125 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14903 states and 27919 transitions. [2021-11-02 22:20:16,181 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8120 [2021-11-02 22:20:16,182 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:16,182 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:16,188 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:16,188 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:16,188 INFO L791 eck$LassoCheckResult]: Stem: 150280#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 150281#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 149539#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 149540#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 150079#L3215 assume 0 != main_~tmp~24; 150975#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 150976#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 151268#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 150225#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 150399#L414 assume 0 == initPersonOnFloor_~floor; 151075#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 149388#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 150350#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 150241#L2638-2 assume !(0 == callOnFloor_~floorID); 151136#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 149270#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 149271#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 149287#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 150172#L414-1 assume 0 == initPersonOnFloor_~floor; 150173#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 151186#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 151187#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 151125#L2638-5 assume !(0 == callOnFloor_~floorID); 151126#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 151372#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 151373#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 151957#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 151956#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 151955#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 151950#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 151948#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 151943#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 151933#L2148 assume !(0 != timeShift_~tmp___9~2); 151932#L2239 assume !(1 == ~doorState~0); 151931#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 151914#L1590 assume !(1 == stopRequestedInDirection_~dir); 151908#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 151886#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 151876#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 151868#L1966 assume !(1 == ~currentHeading~0); 151859#L1976 assume !(0 == ~currentFloorID~0); 151848#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 151849#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 152722#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 152721#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 152719#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 152720#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 152701#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 152692#L2724 cleanup_~i~3 := 0; 152690#L3022-2 [2021-11-02 22:20:16,189 INFO L793 eck$LassoCheckResult]: Loop: 152690#L3022-2 assume !false; 152688#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 152686#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 152684#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 152683#L3030 assume 1 != cleanup_~tmp___0~9; 152549#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 151804#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 151805#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 151799#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 151801#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 152540#L138-22 assume !(0 == isFloorCalling_~floorID); 152539#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 151554#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 151555#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 152527#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 152526#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 152525#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 152523#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 152522#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 152521#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 152518#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 152512#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 152508#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 152506#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 152502#L2148-1 assume !(0 != timeShift_~tmp___9~2); 152488#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 152487#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 152475#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 152461#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 152452#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 152445#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 152436#L1966-3 assume !(1 == ~currentHeading~0); 152428#L1976-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 152420#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 152415#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 155324#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 155323#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 155321#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 155322#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 155306#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 152691#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 152690#L3022-2 [2021-11-02 22:20:16,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:16,190 INFO L85 PathProgramCache]: Analyzing trace with hash -719546396, now seen corresponding path program 4 times [2021-11-02 22:20:16,190 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:16,191 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [138897154] [2021-11-02 22:20:16,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:16,191 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:16,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:16,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:16,258 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:16,258 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [138897154] [2021-11-02 22:20:16,258 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [138897154] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:16,259 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:16,259 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:16,259 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190579237] [2021-11-02 22:20:16,259 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:16,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:16,261 INFO L85 PathProgramCache]: Analyzing trace with hash -270082285, now seen corresponding path program 1 times [2021-11-02 22:20:16,261 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:16,261 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135743346] [2021-11-02 22:20:16,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:16,262 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:16,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:16,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:16,302 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:16,302 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135743346] [2021-11-02 22:20:16,302 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135743346] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:16,303 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:16,303 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:16,303 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1087059903] [2021-11-02 22:20:16,303 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:16,304 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:16,304 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:16,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:16,305 INFO L87 Difference]: Start difference. First operand 14903 states and 27919 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:16,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:16,748 INFO L93 Difference]: Finished difference Result 22463 states and 41900 transitions. [2021-11-02 22:20:16,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:16,749 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22463 states and 41900 transitions. [2021-11-02 22:20:16,829 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15420 [2021-11-02 22:20:16,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22463 states to 22463 states and 41900 transitions. [2021-11-02 22:20:16,909 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22463 [2021-11-02 22:20:16,928 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22463 [2021-11-02 22:20:16,928 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22463 states and 41900 transitions. [2021-11-02 22:20:16,969 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:16,969 INFO L681 BuchiCegarLoop]: Abstraction has 22463 states and 41900 transitions. [2021-11-02 22:20:16,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22463 states and 41900 transitions. [2021-11-02 22:20:17,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22463 to 14921. [2021-11-02 22:20:17,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14921 states, 14921 states have (on average 1.8723275919844515) internal successors, (27937), 14920 states have internal predecessors, (27937), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:17,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14921 states to 14921 states and 27937 transitions. [2021-11-02 22:20:17,379 INFO L704 BuchiCegarLoop]: Abstraction has 14921 states and 27937 transitions. [2021-11-02 22:20:17,379 INFO L587 BuchiCegarLoop]: Abstraction has 14921 states and 27937 transitions. [2021-11-02 22:20:17,379 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-02 22:20:17,379 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14921 states and 27937 transitions. [2021-11-02 22:20:17,432 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8132 [2021-11-02 22:20:17,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:17,433 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:17,443 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:17,444 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:17,444 INFO L791 eck$LassoCheckResult]: Stem: 187668#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 187669#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 186915#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 186916#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 187464#L3215 assume 0 != main_~tmp~24; 188392#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 188393#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 188691#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 187612#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 187789#L414 assume 0 == initPersonOnFloor_~floor; 188495#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 186764#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 187739#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 187629#L2638-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 186647#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 186648#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 188324#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 188325#L414-1 assume 0 == initPersonOnFloor_~floor; 189086#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 187045#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 188705#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 187606#L2638-5 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 187485#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 187072#L138 assume !(0 == isFloorCalling_~floorID); 187073#L142 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 188282#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 189319#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 188322#L1403 assume !(0 == buttonForFloorIsPressed_~floorID); 188323#L1407 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 189988#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 189987#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 189986#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 189985#L2148 assume !(0 != timeShift_~tmp___9~2); 189984#L2239 assume !(1 == ~doorState~0); 189983#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 189982#L1590 assume !(1 == stopRequestedInDirection_~dir); 187212#L1759 assume !(0 == ~currentFloorID~0); 187213#L1765 assume !(~currentFloorID~0 > 0); 187942#L1780 assume ~currentFloorID~0 > 0; 188749#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 187049#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 187050#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 188899#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 188901#L1966 assume !(1 == ~currentHeading~0); 188499#L1976 assume !(0 == ~currentFloorID~0); 187325#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 201165#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 201164#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 201160#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 201159#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 201157#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 201153#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 201145#L2724 cleanup_~i~3 := 0; 201143#L3022-2 [2021-11-02 22:20:17,445 INFO L793 eck$LassoCheckResult]: Loop: 201143#L3022-2 assume !false; 201139#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 201136#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 189051#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 189052#L3030 assume 1 != cleanup_~tmp___0~9; 200903#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 188872#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 188723#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 188724#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 188686#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 188687#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 188746#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 200565#L138-26 assume !(0 == isFloorCalling_~floorID); 188208#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 200821#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 187912#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 187914#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 189246#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 200822#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 188775#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 188776#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 200840#L2148-1 assume !(0 != timeShift_~tmp___9~2); 200906#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 200690#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 189152#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 189153#L1759-2 assume !(0 == ~currentFloorID~0); 201305#L1765-2 assume !(~currentFloorID~0 > 0); 187031#L1780-2 assume ~currentFloorID~0 > 0; 187033#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 188997#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 200674#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 201275#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 201273#L1966-3 assume !(1 == ~currentHeading~0); 201271#L1976-9 assume !(0 == ~currentFloorID~0); 201269#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 201263#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 201262#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 201261#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 201260#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 188372#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 188373#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 201144#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 201143#L3022-2 [2021-11-02 22:20:17,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:17,446 INFO L85 PathProgramCache]: Analyzing trace with hash 1307297098, now seen corresponding path program 1 times [2021-11-02 22:20:17,446 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:17,446 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101206599] [2021-11-02 22:20:17,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:17,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:17,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:17,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:17,530 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:17,531 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101206599] [2021-11-02 22:20:17,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101206599] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:17,531 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:17,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:17,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [863942] [2021-11-02 22:20:17,532 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:17,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:17,533 INFO L85 PathProgramCache]: Analyzing trace with hash 703850065, now seen corresponding path program 1 times [2021-11-02 22:20:17,533 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:17,534 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1575400701] [2021-11-02 22:20:17,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:17,535 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:17,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:17,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:17,592 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:17,594 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1575400701] [2021-11-02 22:20:17,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1575400701] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:17,602 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:17,602 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:17,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405891337] [2021-11-02 22:20:17,603 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:17,603 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:17,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:17,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:17,604 INFO L87 Difference]: Start difference. First operand 14921 states and 27937 transitions. cyclomatic complexity: 13017 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:19,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:19,298 INFO L93 Difference]: Finished difference Result 23547 states and 43733 transitions. [2021-11-02 22:20:19,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-02 22:20:19,301 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23547 states and 43733 transitions. [2021-11-02 22:20:19,411 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12894 [2021-11-02 22:20:19,492 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23547 states to 23547 states and 43733 transitions. [2021-11-02 22:20:19,493 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23547 [2021-11-02 22:20:19,518 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23547 [2021-11-02 22:20:19,518 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23547 states and 43733 transitions. [2021-11-02 22:20:19,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:19,545 INFO L681 BuchiCegarLoop]: Abstraction has 23547 states and 43733 transitions. [2021-11-02 22:20:19,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23547 states and 43733 transitions. [2021-11-02 22:20:19,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23547 to 22083. [2021-11-02 22:20:19,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22083 states, 22083 states have (on average 1.861250735860164) internal successors, (41102), 22082 states have internal predecessors, (41102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:20,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22083 states to 22083 states and 41102 transitions. [2021-11-02 22:20:20,051 INFO L704 BuchiCegarLoop]: Abstraction has 22083 states and 41102 transitions. [2021-11-02 22:20:20,051 INFO L587 BuchiCegarLoop]: Abstraction has 22083 states and 41102 transitions. [2021-11-02 22:20:20,051 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-02 22:20:20,051 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22083 states and 41102 transitions. [2021-11-02 22:20:20,131 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12072 [2021-11-02 22:20:20,131 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:20,131 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:20,138 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:20,138 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:20,139 INFO L791 eck$LassoCheckResult]: Stem: 226143#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 226144#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 225389#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 225390#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 225939#L3215 assume 0 != main_~tmp~24; 226856#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 226857#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 227172#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 226088#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 226261#L414 assume 0 == initPersonOnFloor_~floor; 226965#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 225241#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 226213#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 226104#L2638-2 assume !(0 == callOnFloor_~floorID); 227022#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 226463#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 227905#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 227904#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 226034#L414-1 assume 0 == initPersonOnFloor_~floor; 226035#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 227072#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 227073#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 227011#L2638-5 assume !(0 == callOnFloor_~floorID); 227012#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 227280#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 227281#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 227869#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 227867#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 227864#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 227866#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 228069#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 228068#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 228066#L2148 assume !(0 != timeShift_~tmp___9~2); 228065#L2239 assume !(1 == ~doorState~0); 228064#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 228062#L1590 assume !(1 == stopRequestedInDirection_~dir); 228063#L1759 assume !(0 == ~currentFloorID~0); 225684#L1765 assume !(~currentFloorID~0 > 0); 226409#L1780 assume ~currentFloorID~0 > 0; 227231#L1782 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 225521#L1783 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 225522#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 246649#L2247 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 245690#L1966 assume !(1 == ~currentHeading~0); 245689#L1976 assume !(0 == ~currentFloorID~0); 245372#L1976-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245370#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245368#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 245367#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 245366#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 245354#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 245347#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 245337#L2724 cleanup_~i~3 := 0; 245334#L3022-2 [2021-11-02 22:20:20,139 INFO L793 eck$LassoCheckResult]: Loop: 245334#L3022-2 assume !false; 245332#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 245330#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 245328#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 245326#L3030 assume 1 != cleanup_~tmp___0~9; 245325#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 245324#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 245323#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 245322#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 226374#L1498 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 226375#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 243938#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 245644#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 245643#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 245632#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 245544#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 245546#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 245554#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 245549#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 245548#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 245542#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 245543#L2148-1 assume !(0 != timeShift_~tmp___9~2); 246425#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 246891#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 246889#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 246890#L1759-2 assume !(0 == ~currentFloorID~0); 246763#L1765-2 assume !(~currentFloorID~0 > 0); 246759#L1780-2 assume ~currentFloorID~0 > 0; 246724#L1782-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 225430#L1783-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 225431#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 246785#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 246739#L1966-3 assume !(1 == ~currentHeading~0); 246733#L1976-9 assume !(0 == ~currentFloorID~0); 245457#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 245452#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245451#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 245450#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 245448#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 245449#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 245433#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 245336#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 245334#L3022-2 [2021-11-02 22:20:20,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:20,140 INFO L85 PathProgramCache]: Analyzing trace with hash 848034893, now seen corresponding path program 1 times [2021-11-02 22:20:20,140 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:20,140 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714033058] [2021-11-02 22:20:20,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:20,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:20,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:20,197 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:20,198 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:20,200 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714033058] [2021-11-02 22:20:20,201 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714033058] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:20,201 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:20,201 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:20,201 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [905019669] [2021-11-02 22:20:20,202 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:20,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:20,203 INFO L85 PathProgramCache]: Analyzing trace with hash -1589603244, now seen corresponding path program 1 times [2021-11-02 22:20:20,203 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:20,203 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058886470] [2021-11-02 22:20:20,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:20,203 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:20,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:20,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:20,240 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:20,240 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058886470] [2021-11-02 22:20:20,241 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058886470] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:20,241 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:20,241 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:20,241 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121783751] [2021-11-02 22:20:20,241 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:20,242 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:20,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:20:20,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:20:20,243 INFO L87 Difference]: Start difference. First operand 22083 states and 41102 transitions. cyclomatic complexity: 19020 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:22,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:22,344 INFO L93 Difference]: Finished difference Result 27858 states and 51817 transitions. [2021-11-02 22:20:22,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:22,345 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27858 states and 51817 transitions. [2021-11-02 22:20:22,463 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23211 [2021-11-02 22:20:22,730 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27858 states to 27858 states and 51817 transitions. [2021-11-02 22:20:22,731 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27858 [2021-11-02 22:20:22,753 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27858 [2021-11-02 22:20:22,753 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27858 states and 51817 transitions. [2021-11-02 22:20:22,769 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:22,769 INFO L681 BuchiCegarLoop]: Abstraction has 27858 states and 51817 transitions. [2021-11-02 22:20:22,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27858 states and 51817 transitions. [2021-11-02 22:20:23,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27858 to 15277. [2021-11-02 22:20:23,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15277 states, 15277 states have (on average 1.8537671008705898) internal successors, (28320), 15276 states have internal predecessors, (28320), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:23,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15277 states to 15277 states and 28320 transitions. [2021-11-02 22:20:23,070 INFO L704 BuchiCegarLoop]: Abstraction has 15277 states and 28320 transitions. [2021-11-02 22:20:23,070 INFO L587 BuchiCegarLoop]: Abstraction has 15277 states and 28320 transitions. [2021-11-02 22:20:23,070 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-02 22:20:23,070 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15277 states and 28320 transitions. [2021-11-02 22:20:23,111 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12112 [2021-11-02 22:20:23,112 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:23,112 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:23,114 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:23,115 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:23,115 INFO L791 eck$LassoCheckResult]: Stem: 276035#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 276036#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 275341#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 275342#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 275847#L3215 assume 0 != main_~tmp~24; 276690#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 276691#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 276972#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 275983#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 276150#L414 assume 0 == initPersonOnFloor_~floor; 276792#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 275202#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 276102#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 275999#L2638-2 assume !(0 == callOnFloor_~floorID); 276846#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 276335#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 277497#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 277496#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 277492#L414-1 assume 0 == initPersonOnFloor_~floor; 277462#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 277460#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 277458#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 277454#L2638-5 assume !(0 == callOnFloor_~floorID); 277452#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 277449#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 277448#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 277447#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 277446#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 276625#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 276626#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 276647#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 276649#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 277445#L2148 assume !(0 != timeShift_~tmp___9~2); 276777#L2239 assume !(1 == ~doorState~0); 275276#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 275277#L1590 assume !(1 == stopRequestedInDirection_~dir); 275603#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 275604#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 277049#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 275718#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 275719#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 276851#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 275720#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 275324#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 276164#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 277264#L1966-2 assume !(1 == ~currentHeading~0); 277269#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 277206#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 275742#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 287726#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 287725#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 287724#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 287721#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 287714#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 287705#L2724 cleanup_~i~3 := 0; 287703#L3022-2 [2021-11-02 22:20:23,116 INFO L793 eck$LassoCheckResult]: Loop: 287703#L3022-2 assume !false; 287702#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 287701#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 287695#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 287693#L3030 assume 1 != cleanup_~tmp___0~9; 287692#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 287691#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 287690#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 284046#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 277596#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 277595#L138-22 assume !(0 == isFloorCalling_~floorID); 277587#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 277574#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 277575#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 289059#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 289058#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 289057#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 289056#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 277536#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 277537#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 277532#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 277533#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 281067#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 281066#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 281065#L2148-1 assume !(0 != timeShift_~tmp___9~2); 276042#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 276043#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 277205#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 277358#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 276640#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 275330#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 275331#L2021-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~19 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 277026#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 289905#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 277112#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 277113#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 290196#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 290195#L1966-5 assume !(1 == ~currentHeading~0); 290194#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 275339#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 275340#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 287747#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 287746#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 287744#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 287745#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 287729#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 287704#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 287703#L3022-2 [2021-11-02 22:20:23,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:23,117 INFO L85 PathProgramCache]: Analyzing trace with hash -290076255, now seen corresponding path program 1 times [2021-11-02 22:20:23,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:23,117 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1713969247] [2021-11-02 22:20:23,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:23,118 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:23,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:23,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:23,177 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:23,177 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1713969247] [2021-11-02 22:20:23,177 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1713969247] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:23,177 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:23,178 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:23,178 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852049625] [2021-11-02 22:20:23,179 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:23,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:23,180 INFO L85 PathProgramCache]: Analyzing trace with hash 662269652, now seen corresponding path program 1 times [2021-11-02 22:20:23,180 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:23,180 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1154499069] [2021-11-02 22:20:23,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:23,180 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:23,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:23,213 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:23,214 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:23,214 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1154499069] [2021-11-02 22:20:23,214 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1154499069] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:23,214 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:23,214 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:23,215 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577882888] [2021-11-02 22:20:23,215 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:23,215 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:23,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:23,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:23,216 INFO L87 Difference]: Start difference. First operand 15277 states and 28320 transitions. cyclomatic complexity: 13044 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:23,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:23,759 INFO L93 Difference]: Finished difference Result 48399 states and 89948 transitions. [2021-11-02 22:20:23,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:23,760 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48399 states and 89948 transitions. [2021-11-02 22:20:24,001 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45073 [2021-11-02 22:20:24,190 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48399 states to 48399 states and 89948 transitions. [2021-11-02 22:20:24,190 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48399 [2021-11-02 22:20:24,236 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48399 [2021-11-02 22:20:24,236 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48399 states and 89948 transitions. [2021-11-02 22:20:24,267 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:24,267 INFO L681 BuchiCegarLoop]: Abstraction has 48399 states and 89948 transitions. [2021-11-02 22:20:24,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48399 states and 89948 transitions. [2021-11-02 22:20:24,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48399 to 15297. [2021-11-02 22:20:24,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15297 states, 15297 states have (on average 1.852650846571223) internal successors, (28340), 15296 states have internal predecessors, (28340), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:24,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15297 states to 15297 states and 28340 transitions. [2021-11-02 22:20:24,958 INFO L704 BuchiCegarLoop]: Abstraction has 15297 states and 28340 transitions. [2021-11-02 22:20:24,958 INFO L587 BuchiCegarLoop]: Abstraction has 15297 states and 28340 transitions. [2021-11-02 22:20:24,958 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-02 22:20:24,959 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15297 states and 28340 transitions. [2021-11-02 22:20:24,998 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12130 [2021-11-02 22:20:24,998 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:24,998 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:25,000 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:25,000 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:25,001 INFO L791 eck$LassoCheckResult]: Stem: 339733#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 339734#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 339029#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 339030#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 339539#L3215 assume 0 != main_~tmp~24; 340395#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 340396#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 340692#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 339681#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 339849#L414 assume 0 == initPersonOnFloor_~floor; 340499#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 338889#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 339801#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 339697#L2638-2 assume !(0 == callOnFloor_~floorID); 340557#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 340037#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 341300#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 341299#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 341295#L414-1 assume 0 == initPersonOnFloor_~floor; 341265#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 341263#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 341261#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 341257#L2638-5 assume !(0 == callOnFloor_~floorID); 341255#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 341252#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 341251#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 341250#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 341249#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 340334#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 340335#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 340356#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 340358#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 341246#L2148 assume !(0 != timeShift_~tmp___9~2); 340480#L2239 assume !(1 == ~doorState~0); 338964#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 338965#L1590 assume !(1 == stopRequestedInDirection_~dir); 339292#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 339293#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 340776#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 339408#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 339410#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 341247#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 339411#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 339012#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 339863#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 341012#L1966-2 assume !(1 == ~currentHeading~0); 341019#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 340946#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 339432#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 349510#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 349508#L2664 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 349506#L2665 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 349505#L1395 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 349503#L2669 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 349484#L2724 cleanup_~i~3 := 0; 349481#L3022-2 [2021-11-02 22:20:25,001 INFO L793 eck$LassoCheckResult]: Loop: 349481#L3022-2 assume !false; 347955#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 347954#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 347953#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 347952#L3030 assume 1 != cleanup_~tmp___0~9; 347951#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 347115#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 347114#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 347112#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 347110#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 347109#L138-22 assume !(0 == isFloorCalling_~floorID); 347108#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 347104#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 344794#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 344778#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 344776#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 344774#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 344770#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 344759#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 344757#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 344756#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 344755#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 344753#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 344752#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 344747#L2148-1 assume !(0 != timeShift_~tmp___9~2); 344739#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 340944#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 340945#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 341134#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 341156#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 339018#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 339019#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 340750#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 341386#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 340850#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 340851#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 350244#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 350242#L1966-5 assume !(1 == ~currentHeading~0); 350239#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 350235#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 350233#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 350230#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 349649#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 349644#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 349642#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 349488#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 349483#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 349481#L3022-2 [2021-11-02 22:20:25,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:25,002 INFO L85 PathProgramCache]: Analyzing trace with hash -290076255, now seen corresponding path program 2 times [2021-11-02 22:20:25,002 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:25,002 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [305787693] [2021-11-02 22:20:25,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:25,002 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:25,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:25,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:25,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:25,059 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [305787693] [2021-11-02 22:20:25,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [305787693] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:25,059 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:25,059 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:25,060 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2042335886] [2021-11-02 22:20:25,060 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:25,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:25,061 INFO L85 PathProgramCache]: Analyzing trace with hash -358798702, now seen corresponding path program 1 times [2021-11-02 22:20:25,061 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:25,061 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290189659] [2021-11-02 22:20:25,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:25,061 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:25,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:25,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:25,136 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:25,136 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290189659] [2021-11-02 22:20:25,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [290189659] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:25,137 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:25,137 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:25,137 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2099536037] [2021-11-02 22:20:25,138 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:25,138 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:25,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:20:25,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:20:25,139 INFO L87 Difference]: Start difference. First operand 15297 states and 28340 transitions. cyclomatic complexity: 13044 Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:27,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:27,261 INFO L93 Difference]: Finished difference Result 39697 states and 72777 transitions. [2021-11-02 22:20:27,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-02 22:20:27,265 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39697 states and 72777 transitions. [2021-11-02 22:20:27,427 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36513 [2021-11-02 22:20:27,549 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39697 states to 39697 states and 72777 transitions. [2021-11-02 22:20:27,549 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39697 [2021-11-02 22:20:27,577 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39697 [2021-11-02 22:20:27,577 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39697 states and 72777 transitions. [2021-11-02 22:20:27,596 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:27,596 INFO L681 BuchiCegarLoop]: Abstraction has 39697 states and 72777 transitions. [2021-11-02 22:20:27,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39697 states and 72777 transitions. [2021-11-02 22:20:27,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39697 to 22155. [2021-11-02 22:20:27,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22155 states, 22155 states have (on average 1.861024599413225) internal successors, (41231), 22154 states have internal predecessors, (41231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:28,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22155 states to 22155 states and 41231 transitions. [2021-11-02 22:20:28,206 INFO L704 BuchiCegarLoop]: Abstraction has 22155 states and 41231 transitions. [2021-11-02 22:20:28,206 INFO L587 BuchiCegarLoop]: Abstraction has 22155 states and 41231 transitions. [2021-11-02 22:20:28,206 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-02 22:20:28,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22155 states and 41231 transitions. [2021-11-02 22:20:28,255 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18991 [2021-11-02 22:20:28,255 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:28,255 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:28,259 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:28,259 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:28,260 INFO L791 eck$LassoCheckResult]: Stem: 394767#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 394768#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 394059#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 394060#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 394575#L3215 assume 0 != main_~tmp~24; 395444#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 395445#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 395742#L3272 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 394714#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 394883#L414 assume 0 == initPersonOnFloor_~floor; 395554#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 393918#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 394835#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 394731#L2638-2 assume !(0 == callOnFloor_~floorID); 395613#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 395077#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 396373#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 396372#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 396371#L414-1 assume 0 == initPersonOnFloor_~floor; 396338#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 396336#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 396334#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 396330#L2638-5 assume !(0 == callOnFloor_~floorID); 396328#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 396325#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 396324#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 396323#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 396322#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 395379#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 395380#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 395402#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 395404#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 396319#L2148 assume !(0 != timeShift_~tmp___9~2); 395535#L2239 assume !(1 == ~doorState~0); 393994#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 393995#L1590 assume !(1 == stopRequestedInDirection_~dir); 394327#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 394328#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 395831#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 394444#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 394446#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 396320#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 394447#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 394042#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 394896#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 396067#L1966-2 assume !(1 == ~currentHeading~0); 396075#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 396000#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 394469#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 394403#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 394404#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 396187#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 401852#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 396429#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 396430#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 401843#L2724 cleanup_~i~3 := 0; 401841#L3022-2 [2021-11-02 22:20:28,260 INFO L793 eck$LassoCheckResult]: Loop: 401841#L3022-2 assume !false; 401840#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 401839#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 401838#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 401837#L3030 assume 1 != cleanup_~tmp___0~9; 401836#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 401835#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 401834#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 401832#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 401833#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 402107#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 402105#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 402106#L138-26 assume !(0 == isFloorCalling_~floorID); 402096#L142-26 assume !(1 == isFloorCalling_~floorID); 402097#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 402088#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 402089#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 411909#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 400197#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 400195#L2150-2 assume !(0 != ~persons_0~0); 400171#L2150-3 assume !(0 != ~persons_1~0); 400143#L2164-1 assume !(0 != ~persons_2~0); 400118#L2178-1 assume !(0 != ~persons_3~0); 400115#L2192-1 assume !(0 != ~persons_4~0); 400110#L2206-1 assume !(0 != ~persons_5~0); 400106#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 400105#L234-12 assume 0 == isPersonOnFloor_~floor; 400077#L235-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 400060#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 400058#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 400056#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 400055#L234-14 assume 0 == isPersonOnFloor_~floor; 400034#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 400019#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 400017#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 399203#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 399202#L234-16 assume 0 == isPersonOnFloor_~floor; 399185#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 399164#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 399131#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 399128#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 399124#L234-18 assume 0 == isPersonOnFloor_~floor; 399113#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 399085#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 399083#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 399084#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 401053#L234-20 assume 0 == isPersonOnFloor_~floor; 401012#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 401005#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 401002#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 401004#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 410234#L234-22 assume 0 == isPersonOnFloor_~floor; 400964#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 400958#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 398795#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 398796#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 401890#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 401888#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 401871#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 398417#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 401870#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 401869#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 401868#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 401857#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 401861#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 401854#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 401842#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 401841#L3022-2 [2021-11-02 22:20:28,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:28,261 INFO L85 PathProgramCache]: Analyzing trace with hash 71893215, now seen corresponding path program 1 times [2021-11-02 22:20:28,262 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:28,262 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [142526217] [2021-11-02 22:20:28,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:28,262 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:28,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:28,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:28,316 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:28,317 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [142526217] [2021-11-02 22:20:28,317 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [142526217] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:28,317 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:28,317 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:28,317 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [437560523] [2021-11-02 22:20:28,318 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:28,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:28,318 INFO L85 PathProgramCache]: Analyzing trace with hash -1127361253, now seen corresponding path program 1 times [2021-11-02 22:20:28,319 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:28,319 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997589971] [2021-11-02 22:20:28,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:28,319 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:28,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:28,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:28,356 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:28,356 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997589971] [2021-11-02 22:20:28,357 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997589971] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:28,357 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:28,357 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:28,357 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2107901785] [2021-11-02 22:20:28,358 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:28,358 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:28,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:20:28,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:20:28,359 INFO L87 Difference]: Start difference. First operand 22155 states and 41231 transitions. cyclomatic complexity: 19077 Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:28,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:28,603 INFO L93 Difference]: Finished difference Result 44236 states and 82319 transitions. [2021-11-02 22:20:28,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:20:28,604 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44236 states and 82319 transitions. [2021-11-02 22:20:28,788 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37982 [2021-11-02 22:20:28,928 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44236 states to 44236 states and 82319 transitions. [2021-11-02 22:20:28,929 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44236 [2021-11-02 22:20:28,961 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44236 [2021-11-02 22:20:28,962 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44236 states and 82319 transitions. [2021-11-02 22:20:28,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:28,986 INFO L681 BuchiCegarLoop]: Abstraction has 44236 states and 82319 transitions. [2021-11-02 22:20:29,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44236 states and 82319 transitions. [2021-11-02 22:20:29,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44236 to 22155. [2021-11-02 22:20:29,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22155 states, 22155 states have (on average 1.8607537801850598) internal successors, (41225), 22154 states have internal predecessors, (41225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:29,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22155 states to 22155 states and 41225 transitions. [2021-11-02 22:20:29,717 INFO L704 BuchiCegarLoop]: Abstraction has 22155 states and 41225 transitions. [2021-11-02 22:20:29,717 INFO L587 BuchiCegarLoop]: Abstraction has 22155 states and 41225 transitions. [2021-11-02 22:20:29,717 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-11-02 22:20:29,718 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22155 states and 41225 transitions. [2021-11-02 22:20:29,789 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18991 [2021-11-02 22:20:29,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:29,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:29,794 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:29,795 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:29,795 INFO L791 eck$LassoCheckResult]: Stem: 461151#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 461152#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 460456#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 460457#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 460964#L3215 assume 0 != main_~tmp~24; 461805#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 461806#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 462096#L3272 assume !(0 == getOrigin_~person); 462097#L3276 assume !(1 == getOrigin_~person); 461101#L3280 assume !(2 == getOrigin_~person); 461102#L3284 assume !(3 == getOrigin_~person); 462055#L3288 assume !(4 == getOrigin_~person); 462482#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 461270#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 461271#L414 assume 0 == initPersonOnFloor_~floor; 461907#L415 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 460318#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 461219#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 461115#L2638-2 assume !(0 == callOnFloor_~floorID); 461965#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 460201#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 460202#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 462620#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 462618#L414-1 assume 0 == initPersonOnFloor_~floor; 462588#L415-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 462586#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 462584#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 462580#L2638-5 assume !(0 == callOnFloor_~floorID); 462578#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 462575#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 462574#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 462573#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 462572#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 461743#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 461744#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 461762#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 461764#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 462569#L2148 assume !(0 != timeShift_~tmp___9~2); 461889#L2239 assume !(1 == ~doorState~0); 460391#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 460392#L1590 assume !(1 == stopRequestedInDirection_~dir); 460719#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 460720#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 462176#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 460833#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 460835#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 462570#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 460836#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 460439#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 461284#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 462387#L1966-2 assume !(1 == ~currentHeading~0); 462392#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 462330#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 460857#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 460795#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 460796#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 460184#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 460185#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 462225#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 461745#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 460418#L2724 cleanup_~i~3 := 0; 461394#L3022-2 [2021-11-02 22:20:29,796 INFO L793 eck$LassoCheckResult]: Loop: 461394#L3022-2 assume !false; 479532#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 479016#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 479014#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 479006#L3030 assume 1 != cleanup_~tmp___0~9; 479004#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 479003#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 479002#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 478995#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 468589#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 468587#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 468585#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 468581#L138-26 assume !(0 == isFloorCalling_~floorID); 468580#L142-26 assume !(1 == isFloorCalling_~floorID); 468574#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 468567#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 468563#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 462063#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 461067#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 461068#L2150-2 assume !(0 != ~persons_0~0); 460666#L2150-3 assume !(0 != ~persons_1~0); 461154#L2164-1 assume !(0 != ~persons_2~0); 460386#L2178-1 assume !(0 != ~persons_3~0); 460387#L2192-1 assume !(0 != ~persons_4~0); 462101#L2206-1 assume !(0 != ~persons_5~0); 461782#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 462082#L234-12 assume 0 == isPersonOnFloor_~floor; 460913#L235-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 460193#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 460194#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 460768#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 481212#L234-14 assume 0 == isPersonOnFloor_~floor; 481191#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 481176#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 481175#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 461483#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 461484#L234-16 assume 0 == isPersonOnFloor_~floor; 460299#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 460300#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 460842#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 460207#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 460498#L234-18 assume 0 == isPersonOnFloor_~floor; 460499#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 460261#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 460729#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 462301#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 461367#L234-20 assume 0 == isPersonOnFloor_~floor; 461368#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 481411#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 481408#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 481409#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 481554#L234-22 assume 0 == isPersonOnFloor_~floor; 481525#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 481518#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 481516#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 481515#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 481514#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 461492#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 462549#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 460455#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 479582#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 479580#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 479565#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 479554#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 479558#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 479551#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 479546#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 461394#L3022-2 [2021-11-02 22:20:29,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:29,797 INFO L85 PathProgramCache]: Analyzing trace with hash -1262757783, now seen corresponding path program 1 times [2021-11-02 22:20:29,798 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:29,798 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [682695457] [2021-11-02 22:20:29,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:29,798 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:29,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:29,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:29,882 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:29,882 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [682695457] [2021-11-02 22:20:29,882 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [682695457] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:29,883 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:29,883 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:20:29,883 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297746154] [2021-11-02 22:20:29,884 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:29,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:29,884 INFO L85 PathProgramCache]: Analyzing trace with hash -1127361253, now seen corresponding path program 2 times [2021-11-02 22:20:29,885 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:29,885 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524233805] [2021-11-02 22:20:29,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:29,885 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:29,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:29,924 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:29,925 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:29,925 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524233805] [2021-11-02 22:20:29,925 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524233805] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:29,925 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:29,926 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:29,926 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051625797] [2021-11-02 22:20:29,926 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:29,926 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:29,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:20:29,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:20:29,927 INFO L87 Difference]: Start difference. First operand 22155 states and 41225 transitions. cyclomatic complexity: 19071 Second operand has 6 states, 6 states have (on average 10.166666666666666) internal successors, (61), 6 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:30,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:30,613 INFO L93 Difference]: Finished difference Result 66227 states and 123232 transitions. [2021-11-02 22:20:30,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-02 22:20:30,614 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66227 states and 123232 transitions. [2021-11-02 22:20:31,397 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 56973 [2021-11-02 22:20:31,597 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66227 states to 66227 states and 123232 transitions. [2021-11-02 22:20:31,597 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66227 [2021-11-02 22:20:31,642 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66227 [2021-11-02 22:20:31,643 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66227 states and 123232 transitions. [2021-11-02 22:20:31,675 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:31,675 INFO L681 BuchiCegarLoop]: Abstraction has 66227 states and 123232 transitions. [2021-11-02 22:20:31,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66227 states and 123232 transitions. [2021-11-02 22:20:32,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66227 to 22153. [2021-11-02 22:20:32,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22153 states, 22153 states have (on average 1.8605155058005687) internal successors, (41216), 22152 states have internal predecessors, (41216), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:32,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22153 states to 22153 states and 41216 transitions. [2021-11-02 22:20:32,076 INFO L704 BuchiCegarLoop]: Abstraction has 22153 states and 41216 transitions. [2021-11-02 22:20:32,076 INFO L587 BuchiCegarLoop]: Abstraction has 22153 states and 41216 transitions. [2021-11-02 22:20:32,076 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-11-02 22:20:32,076 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22153 states and 41216 transitions. [2021-11-02 22:20:32,133 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18991 [2021-11-02 22:20:32,133 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:32,133 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:32,138 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:32,138 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:32,138 INFO L791 eck$LassoCheckResult]: Stem: 549552#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 549553#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 548859#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 548860#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 549365#L3215 assume 0 != main_~tmp~24; 550213#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 550214#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 550488#L3272 assume !(0 == getOrigin_~person); 550489#L3276 assume !(1 == getOrigin_~person); 549501#L3280 assume !(2 == getOrigin_~person); 549502#L3284 assume !(3 == getOrigin_~person); 550448#L3288 assume !(4 == getOrigin_~person); 550882#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 549668#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 549669#L414 assume !(0 == initPersonOnFloor_~floor); 548638#L441 assume 1 == initPersonOnFloor_~floor; 548639#L442 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 548721#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 549620#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 549518#L2638-2 assume !(0 == callOnFloor_~floorID); 550363#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 549856#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 550027#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 549804#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 549452#L414-1 assume !(0 == initPersonOnFloor_~floor); 549453#L441-1 assume 1 == initPersonOnFloor_~floor; 550828#L442-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 550990#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 550988#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 550984#L2638-5 assume !(0 == callOnFloor_~floorID); 550982#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 550979#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 550978#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 550977#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 550976#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 550150#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 550151#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 550171#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 550173#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 550973#L2148 assume !(0 != timeShift_~tmp___9~2); 550296#L2239 assume !(1 == ~doorState~0); 548794#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 548795#L1590 assume !(1 == stopRequestedInDirection_~dir); 549123#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 549124#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 550576#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 549236#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 549238#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 550974#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 549239#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 548842#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 549683#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 550783#L1966-2 assume !(1 == ~currentHeading~0); 550790#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 550727#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 549260#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 549198#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 549199#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 550874#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 560810#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 560807#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 556519#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 556518#L2724 cleanup_~i~3 := 0; 556516#L3022-2 [2021-11-02 22:20:32,138 INFO L793 eck$LassoCheckResult]: Loop: 556516#L3022-2 assume !false; 556515#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 556514#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 556513#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 556512#L3030 assume 1 != cleanup_~tmp___0~9; 556511#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 556510#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 556509#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 556507#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 556508#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 561705#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 561702#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 551507#L138-26 assume !(0 == isFloorCalling_~floorID); 551502#L142-26 assume !(1 == isFloorCalling_~floorID); 551504#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 558799#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 558798#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 558791#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 558781#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 558779#L2150-2 assume !(0 != ~persons_0~0); 558755#L2150-3 assume !(0 != ~persons_1~0); 558730#L2164-1 assume !(0 != ~persons_2~0); 558708#L2178-1 assume !(0 != ~persons_3~0); 558705#L2192-1 assume !(0 != ~persons_4~0); 558700#L2206-1 assume !(0 != ~persons_5~0); 558696#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 558695#L234-12 assume 0 == isPersonOnFloor_~floor; 558670#L235-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 558653#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 558651#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 558649#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 558648#L234-14 assume 0 == isPersonOnFloor_~floor; 558627#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 558612#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 558610#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 558611#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 560919#L234-16 assume 0 == isPersonOnFloor_~floor; 556852#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 556826#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 556824#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 556822#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 556814#L234-18 assume 0 == isPersonOnFloor_~floor; 556795#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 556761#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 556759#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 556757#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 556756#L234-20 assume 0 == isPersonOnFloor_~floor; 556722#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 556715#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 556713#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 556711#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 556710#L234-22 assume 0 == isPersonOnFloor_~floor; 556680#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 556642#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 556639#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 556634#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 556627#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 556622#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 556621#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 556546#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 556545#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 556544#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 556541#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 556542#L2680-1 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 556543#L1395-6 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 556531#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 556517#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 556516#L3022-2 [2021-11-02 22:20:32,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:32,139 INFO L85 PathProgramCache]: Analyzing trace with hash 2076003226, now seen corresponding path program 1 times [2021-11-02 22:20:32,139 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:32,139 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965064884] [2021-11-02 22:20:32,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:32,140 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:32,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:32,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:32,199 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:32,199 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965064884] [2021-11-02 22:20:32,199 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [965064884] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:32,200 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:32,200 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:32,200 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [195106271] [2021-11-02 22:20:32,200 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:32,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:32,201 INFO L85 PathProgramCache]: Analyzing trace with hash -1143171811, now seen corresponding path program 1 times [2021-11-02 22:20:32,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:32,201 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2013998563] [2021-11-02 22:20:32,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:32,202 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:32,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:32,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:32,236 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:32,236 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2013998563] [2021-11-02 22:20:32,236 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2013998563] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:32,236 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:32,237 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:32,237 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10207720] [2021-11-02 22:20:32,237 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:32,237 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:32,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:32,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:32,238 INFO L87 Difference]: Start difference. First operand 22153 states and 41216 transitions. cyclomatic complexity: 19064 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:33,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:33,005 INFO L93 Difference]: Finished difference Result 44222 states and 82262 transitions. [2021-11-02 22:20:33,005 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:33,005 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44222 states and 82262 transitions. [2021-11-02 22:20:33,253 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37982 [2021-11-02 22:20:33,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44222 states to 44222 states and 82262 transitions. [2021-11-02 22:20:33,440 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44222 [2021-11-02 22:20:33,484 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44222 [2021-11-02 22:20:33,484 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44222 states and 82262 transitions. [2021-11-02 22:20:33,521 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:33,521 INFO L681 BuchiCegarLoop]: Abstraction has 44222 states and 82262 transitions. [2021-11-02 22:20:33,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44222 states and 82262 transitions. [2021-11-02 22:20:33,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44222 to 22153. [2021-11-02 22:20:33,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22153 states, 22153 states have (on average 1.8598835372184355) internal successors, (41202), 22152 states have internal predecessors, (41202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:34,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22153 states to 22153 states and 41202 transitions. [2021-11-02 22:20:34,242 INFO L704 BuchiCegarLoop]: Abstraction has 22153 states and 41202 transitions. [2021-11-02 22:20:34,242 INFO L587 BuchiCegarLoop]: Abstraction has 22153 states and 41202 transitions. [2021-11-02 22:20:34,242 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-11-02 22:20:34,243 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22153 states and 41202 transitions. [2021-11-02 22:20:34,338 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18991 [2021-11-02 22:20:34,338 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:34,338 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:34,343 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:34,343 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:34,345 INFO L791 eck$LassoCheckResult]: Stem: 615937#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 615938#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 615246#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 615247#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 615753#L3215 assume 0 != main_~tmp~24; 616594#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 616595#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 616882#L3272 assume !(0 == getOrigin_~person); 616883#L3276 assume !(1 == getOrigin_~person); 615888#L3280 assume !(2 == getOrigin_~person); 615889#L3284 assume !(3 == getOrigin_~person); 616840#L3288 assume !(4 == getOrigin_~person); 617284#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 616053#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 616054#L414 assume !(0 == initPersonOnFloor_~floor); 615027#L441 assume 1 == initPersonOnFloor_~floor; 615028#L442 assume !(0 == initPersonOnFloor_~person); 615587#L445 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 615108#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 616004#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 615903#L2638-2 assume !(0 == callOnFloor_~floorID); 616750#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 614991#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 614992#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 616051#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 615839#L414-1 assume !(0 == initPersonOnFloor_~floor); 615840#L441-1 assume 1 == initPersonOnFloor_~floor; 617230#L442-2 assume !(0 == initPersonOnFloor_~person); 617411#L445-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 616794#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 616795#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 617390#L2638-5 assume !(0 == callOnFloor_~floorID); 617388#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 617385#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 617384#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 617383#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 617380#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 616529#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 616530#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 616551#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 616553#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 617373#L2148 assume !(0 != timeShift_~tmp___9~2); 616677#L2239 assume !(1 == ~doorState~0); 615181#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 615182#L1590 assume !(1 == stopRequestedInDirection_~dir); 615508#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 615509#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 616962#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 615622#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 615624#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 617375#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 615625#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 615229#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 616067#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 617183#L1966-2 assume !(1 == ~currentHeading~0); 617188#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 617124#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 615646#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 615583#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 615584#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 614974#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 614975#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 617010#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 616531#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 615208#L2724 cleanup_~i~3 := 0; 616176#L3022-2 [2021-11-02 22:20:34,346 INFO L793 eck$LassoCheckResult]: Loop: 616176#L3022-2 assume !false; 625108#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 625106#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 625104#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 625102#L3030 assume 1 != cleanup_~tmp___0~9; 625100#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 625098#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 625096#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 625092#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 625091#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 625090#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 625089#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 625088#L138-26 assume !(0 == isFloorCalling_~floorID); 625086#L142-26 assume !(1 == isFloorCalling_~floorID); 625087#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 631659#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 631658#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 631651#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 631641#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 631639#L2150-2 assume !(0 != ~persons_0~0); 631615#L2150-3 assume !(0 != ~persons_1~0); 627619#L2164-1 assume !(0 != ~persons_2~0); 627597#L2178-1 assume !(0 != ~persons_3~0); 627594#L2192-1 assume !(0 != ~persons_4~0); 627589#L2206-1 assume !(0 != ~persons_5~0); 627585#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 627584#L234-12 assume 0 == isPersonOnFloor_~floor; 627559#L235-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 627548#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 627546#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 627544#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 627543#L234-14 assume 0 == isPersonOnFloor_~floor; 627522#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 627507#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 627498#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 627497#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 627496#L234-16 assume 0 == isPersonOnFloor_~floor; 627481#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 627460#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 627458#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 627459#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 627983#L234-18 assume 0 == isPersonOnFloor_~floor; 627976#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 627942#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 627940#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 627938#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 627936#L234-20 assume 0 == isPersonOnFloor_~floor; 627894#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 627887#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 627884#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 627882#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 625895#L234-22 assume 0 == isPersonOnFloor_~floor; 625178#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 625168#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 625165#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 625161#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 625159#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 625160#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 625837#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 625824#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 625823#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 625822#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 625820#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 625817#L2680-1 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 625816#L1395-6 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 625124#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 625111#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 616176#L3022-2 [2021-11-02 22:20:34,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:34,357 INFO L85 PathProgramCache]: Analyzing trace with hash -1182543063, now seen corresponding path program 1 times [2021-11-02 22:20:34,358 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:34,358 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [194441444] [2021-11-02 22:20:34,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:34,358 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:34,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:34,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:34,429 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:34,429 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [194441444] [2021-11-02 22:20:34,429 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [194441444] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:34,429 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:34,429 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:34,430 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054796088] [2021-11-02 22:20:34,430 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:34,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:34,431 INFO L85 PathProgramCache]: Analyzing trace with hash -1143171811, now seen corresponding path program 2 times [2021-11-02 22:20:34,431 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:34,431 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282533155] [2021-11-02 22:20:34,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:34,432 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:34,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:34,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:34,481 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:34,481 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282533155] [2021-11-02 22:20:34,481 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282533155] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:34,482 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:34,482 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:34,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2023894611] [2021-11-02 22:20:34,483 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:34,483 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:34,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:34,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:34,484 INFO L87 Difference]: Start difference. First operand 22153 states and 41202 transitions. cyclomatic complexity: 19050 Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:34,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:34,974 INFO L93 Difference]: Finished difference Result 44222 states and 82240 transitions. [2021-11-02 22:20:34,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:34,974 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44222 states and 82240 transitions. [2021-11-02 22:20:35,227 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37982 [2021-11-02 22:20:35,371 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44222 states to 44222 states and 82240 transitions. [2021-11-02 22:20:35,371 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44222 [2021-11-02 22:20:35,405 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44222 [2021-11-02 22:20:35,405 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44222 states and 82240 transitions. [2021-11-02 22:20:35,431 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:35,432 INFO L681 BuchiCegarLoop]: Abstraction has 44222 states and 82240 transitions. [2021-11-02 22:20:35,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44222 states and 82240 transitions. [2021-11-02 22:20:36,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44222 to 22153. [2021-11-02 22:20:36,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22153 states, 22153 states have (on average 1.859251568636302) internal successors, (41188), 22152 states have internal predecessors, (41188), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:36,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22153 states to 22153 states and 41188 transitions. [2021-11-02 22:20:36,238 INFO L704 BuchiCegarLoop]: Abstraction has 22153 states and 41188 transitions. [2021-11-02 22:20:36,238 INFO L587 BuchiCegarLoop]: Abstraction has 22153 states and 41188 transitions. [2021-11-02 22:20:36,238 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-11-02 22:20:36,238 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22153 states and 41188 transitions. [2021-11-02 22:20:36,307 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18991 [2021-11-02 22:20:36,307 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:36,307 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:36,312 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:36,312 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:36,313 INFO L791 eck$LassoCheckResult]: Stem: 682333#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 682334#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 681634#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 681635#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 682144#L3215 assume 0 != main_~tmp~24; 682989#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 682990#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 683274#L3272 assume !(0 == getOrigin_~person); 683275#L3276 assume !(1 == getOrigin_~person); 682284#L3280 assume !(2 == getOrigin_~person); 682285#L3284 assume !(3 == getOrigin_~person); 683233#L3288 assume !(4 == getOrigin_~person); 683665#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 682448#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 682449#L414 assume !(0 == initPersonOnFloor_~floor); 681414#L441 assume 1 == initPersonOnFloor_~floor; 681415#L442 assume !(0 == initPersonOnFloor_~person); 681977#L445 assume !(1 == initPersonOnFloor_~person); 681978#L448 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 681495#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 682400#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 682299#L2638-2 assume !(0 == callOnFloor_~floorID); 683141#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 682631#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 682799#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 682582#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 683809#L414-1 assume !(0 == initPersonOnFloor_~floor); 683766#L441-1 assume 1 == initPersonOnFloor_~floor; 683808#L442-2 assume !(0 == initPersonOnFloor_~person); 683812#L445-2 assume !(1 == initPersonOnFloor_~person); 683796#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 683188#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 683189#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 683778#L2638-5 assume !(0 == callOnFloor_~floorID); 683776#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 683773#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 683772#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 683771#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 683768#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 682922#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 682923#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 682944#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 682946#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 683762#L2148 assume !(0 != timeShift_~tmp___9~2); 683074#L2239 assume !(1 == ~doorState~0); 681569#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 681570#L1590 assume !(1 == stopRequestedInDirection_~dir); 681896#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 681897#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 683356#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 682011#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 682013#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 683763#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 682014#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 681617#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 682462#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 683570#L1966-2 assume !(1 == ~currentHeading~0); 683576#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 683514#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 682036#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 681972#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 681973#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 681361#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 681362#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 683403#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 682924#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 681596#L2724 cleanup_~i~3 := 0; 682571#L3022-2 [2021-11-02 22:20:36,313 INFO L793 eck$LassoCheckResult]: Loop: 682571#L3022-2 assume !false; 691925#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 691924#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 691923#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 691922#L3030 assume 1 != cleanup_~tmp___0~9; 691921#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 691920#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 691919#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 691917#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 691915#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 691914#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 691913#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 691912#L138-26 assume !(0 == isFloorCalling_~floorID); 691911#L142-26 assume !(1 == isFloorCalling_~floorID); 691908#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 691907#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 691900#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 691894#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 691892#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 691889#L2150-2 assume !(0 != ~persons_0~0); 691861#L2150-3 assume !(0 != ~persons_1~0); 691836#L2164-1 assume !(0 != ~persons_2~0); 691814#L2178-1 assume !(0 != ~persons_3~0); 691811#L2192-1 assume !(0 != ~persons_4~0); 691806#L2206-1 assume !(0 != ~persons_5~0); 691802#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 691801#L234-12 assume 0 == isPersonOnFloor_~floor; 691778#L235-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 691761#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 691759#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 691757#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 691756#L234-14 assume 0 == isPersonOnFloor_~floor; 691734#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 691719#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 691710#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 691709#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 691708#L234-16 assume 0 == isPersonOnFloor_~floor; 691063#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 691042#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 691034#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 691032#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 691030#L234-18 assume 0 == isPersonOnFloor_~floor; 691026#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 690998#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 690990#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 690988#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 690987#L234-20 assume 0 == isPersonOnFloor_~floor; 690952#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 690951#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 690948#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 690946#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 690945#L234-22 assume 0 == isPersonOnFloor_~floor; 690912#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 690899#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 690897#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 690895#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 690803#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 690799#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 690798#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 681631#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 690783#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 690780#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 690781#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 691931#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 691935#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 691928#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 691926#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 682571#L3022-2 [2021-11-02 22:20:36,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:36,314 INFO L85 PathProgramCache]: Analyzing trace with hash -1327491516, now seen corresponding path program 1 times [2021-11-02 22:20:36,314 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:36,314 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820282576] [2021-11-02 22:20:36,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:36,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:36,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:36,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:36,391 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:36,391 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820282576] [2021-11-02 22:20:36,392 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820282576] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:36,392 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:36,392 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:36,392 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1810321633] [2021-11-02 22:20:36,393 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:36,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:36,393 INFO L85 PathProgramCache]: Analyzing trace with hash -1127361253, now seen corresponding path program 3 times [2021-11-02 22:20:36,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:36,394 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1196028606] [2021-11-02 22:20:36,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:36,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:36,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:36,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:36,434 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:36,435 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1196028606] [2021-11-02 22:20:36,435 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1196028606] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:36,435 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:36,435 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:36,436 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2003275540] [2021-11-02 22:20:36,436 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:36,436 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:36,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:20:36,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:20:36,437 INFO L87 Difference]: Start difference. First operand 22153 states and 41188 transitions. cyclomatic complexity: 19036 Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:39,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:39,078 INFO L93 Difference]: Finished difference Result 39355 states and 72116 transitions. [2021-11-02 22:20:39,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:39,079 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39355 states and 72116 transitions. [2021-11-02 22:20:39,284 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34348 [2021-11-02 22:20:39,431 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39355 states to 39355 states and 72116 transitions. [2021-11-02 22:20:39,431 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39355 [2021-11-02 22:20:39,466 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39355 [2021-11-02 22:20:39,466 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39355 states and 72116 transitions. [2021-11-02 22:20:39,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:39,493 INFO L681 BuchiCegarLoop]: Abstraction has 39355 states and 72116 transitions. [2021-11-02 22:20:39,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39355 states and 72116 transitions. [2021-11-02 22:20:40,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39355 to 22057. [2021-11-02 22:20:40,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22057 states, 22057 states have (on average 1.8579135875232353) internal successors, (40980), 22056 states have internal predecessors, (40980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:40,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22057 states to 22057 states and 40980 transitions. [2021-11-02 22:20:40,285 INFO L704 BuchiCegarLoop]: Abstraction has 22057 states and 40980 transitions. [2021-11-02 22:20:40,285 INFO L587 BuchiCegarLoop]: Abstraction has 22057 states and 40980 transitions. [2021-11-02 22:20:40,286 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-11-02 22:20:40,286 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22057 states and 40980 transitions. [2021-11-02 22:20:40,346 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18895 [2021-11-02 22:20:40,347 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:40,347 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:40,352 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:40,352 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:40,352 INFO L791 eck$LassoCheckResult]: Stem: 743858#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 743859#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 743163#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 743164#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 743672#L3215 assume 0 != main_~tmp~24; 744517#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 744518#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 744801#L3272 assume !(0 == getOrigin_~person); 744802#L3276 assume !(1 == getOrigin_~person); 743810#L3280 assume !(2 == getOrigin_~person); 743811#L3284 assume !(3 == getOrigin_~person); 744761#L3288 assume !(4 == getOrigin_~person); 745200#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 743972#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 743973#L414 assume !(0 == initPersonOnFloor_~floor); 742944#L441 assume 1 == initPersonOnFloor_~floor; 742945#L442 assume !(0 == initPersonOnFloor_~person); 743504#L445 assume !(1 == initPersonOnFloor_~person); 743505#L448 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 743025#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 743924#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 743824#L2638-2 assume !(0 == callOnFloor_~floorID); 744672#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 744159#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 745359#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 745354#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 745356#L414-1 assume !(0 == initPersonOnFloor_~floor); 745347#L441-1 assume 1 == initPersonOnFloor_~floor; 745355#L442-2 assume !(0 == initPersonOnFloor_~person); 745362#L445-2 assume !(1 == initPersonOnFloor_~person); 745334#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 745318#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 745316#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 745312#L2638-5 assume !(0 == callOnFloor_~floorID); 745310#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 745307#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 745306#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 745305#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 745304#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 744452#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 744453#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 744476#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 744478#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 745303#L2148 assume !(0 != timeShift_~tmp___9~2); 744604#L2239 assume !(1 == ~doorState~0); 743098#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 743099#L1590 assume !(1 == stopRequestedInDirection_~dir); 743424#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 743425#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 744883#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 743540#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 743542#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 745363#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 743543#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 743146#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 743986#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 745105#L1966-2 assume !(1 == ~currentHeading~0); 745110#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 745043#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 743564#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 743499#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 743500#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 745194#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 761211#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 761208#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 744455#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 743125#L2724 cleanup_~i~3 := 0; 744100#L3022-2 [2021-11-02 22:20:40,353 INFO L793 eck$LassoCheckResult]: Loop: 744100#L3022-2 assume !false; 761471#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 761470#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 761469#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 761466#L3030 assume 1 != cleanup_~tmp___0~9; 761465#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 761464#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 761463#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 761458#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 761459#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 764428#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 764369#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 762813#L138-26 assume !(0 == isFloorCalling_~floorID); 762811#L142-26 assume !(1 == isFloorCalling_~floorID); 762807#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 762805#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 762800#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 762794#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 762792#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 762789#L2150-2 assume !(0 != ~persons_0~0); 762765#L2150-3 assume !(0 != ~persons_1~0); 762740#L2164-1 assume !(0 != ~persons_2~0); 762718#L2178-1 assume !(0 != ~persons_3~0); 762715#L2192-1 assume !(0 != ~persons_4~0); 762710#L2206-1 assume !(0 != ~persons_5~0); 762651#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 762650#L234-12 assume !(0 == isPersonOnFloor_~floor); 762648#L267-12 assume 1 == isPersonOnFloor_~floor; 762637#L268-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 762613#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 762605#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 762603#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 762602#L234-14 assume 0 == isPersonOnFloor_~floor; 762581#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 762566#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 762531#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 762125#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 762123#L234-16 assume 0 == isPersonOnFloor_~floor; 762109#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 762083#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 762081#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 761963#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 761961#L234-18 assume 0 == isPersonOnFloor_~floor; 761954#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 761926#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 761918#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 761915#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 761910#L234-20 assume 0 == isPersonOnFloor_~floor; 761879#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 761872#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 761870#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 761812#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 761810#L234-22 assume 0 == isPersonOnFloor_~floor; 761785#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 761778#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 743042#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 743044#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 744195#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 744196#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 761615#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 743160#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 761605#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 761604#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 761599#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 761587#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 761591#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 761584#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 761580#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 744100#L3022-2 [2021-11-02 22:20:40,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:40,354 INFO L85 PathProgramCache]: Analyzing trace with hash -1327491516, now seen corresponding path program 2 times [2021-11-02 22:20:40,354 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:40,354 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320601008] [2021-11-02 22:20:40,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:40,355 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:40,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:40,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:40,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:40,426 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320601008] [2021-11-02 22:20:40,426 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320601008] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:40,426 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:40,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:40,427 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737577624] [2021-11-02 22:20:40,427 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:40,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:40,428 INFO L85 PathProgramCache]: Analyzing trace with hash -569512774, now seen corresponding path program 1 times [2021-11-02 22:20:40,428 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:40,428 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719060822] [2021-11-02 22:20:40,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:40,429 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:40,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:40,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:40,473 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:40,473 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719060822] [2021-11-02 22:20:40,473 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719060822] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:40,473 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:40,473 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:40,474 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1665039846] [2021-11-02 22:20:40,474 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:40,474 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:40,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:40,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:40,475 INFO L87 Difference]: Start difference. First operand 22057 states and 40980 transitions. cyclomatic complexity: 18924 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:41,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:41,078 INFO L93 Difference]: Finished difference Result 87856 states and 163308 transitions. [2021-11-02 22:20:41,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:41,079 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87856 states and 163308 transitions. [2021-11-02 22:20:42,101 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 75580 [2021-11-02 22:20:42,414 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 87856 states to 87856 states and 163308 transitions. [2021-11-02 22:20:42,414 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87856 [2021-11-02 22:20:42,481 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87856 [2021-11-02 22:20:42,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87856 states and 163308 transitions. [2021-11-02 22:20:42,530 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:42,530 INFO L681 BuchiCegarLoop]: Abstraction has 87856 states and 163308 transitions. [2021-11-02 22:20:42,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87856 states and 163308 transitions. [2021-11-02 22:20:42,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87856 to 22057. [2021-11-02 22:20:42,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22057 states, 22057 states have (on average 1.8577322391984403) internal successors, (40976), 22056 states have internal predecessors, (40976), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:43,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22057 states to 22057 states and 40976 transitions. [2021-11-02 22:20:43,031 INFO L704 BuchiCegarLoop]: Abstraction has 22057 states and 40976 transitions. [2021-11-02 22:20:43,032 INFO L587 BuchiCegarLoop]: Abstraction has 22057 states and 40976 transitions. [2021-11-02 22:20:43,032 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-11-02 22:20:43,032 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22057 states and 40976 transitions. [2021-11-02 22:20:43,091 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18895 [2021-11-02 22:20:43,091 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:43,091 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:43,096 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:43,096 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:43,096 INFO L791 eck$LassoCheckResult]: Stem: 853791#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 853792#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 853089#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 853090#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 853600#L3215 assume 0 != main_~tmp~24; 854454#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 854455#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 854745#L3272 assume !(0 == getOrigin_~person); 854746#L3276 assume !(1 == getOrigin_~person); 853740#L3280 assume !(2 == getOrigin_~person); 853741#L3284 assume !(3 == getOrigin_~person); 854702#L3288 assume !(4 == getOrigin_~person); 855146#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 853906#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 853907#L414 assume !(0 == initPersonOnFloor_~floor); 852869#L441 assume !(1 == initPersonOnFloor_~floor); 852871#L468 assume !(2 == initPersonOnFloor_~floor); 853586#L495 assume !(3 == initPersonOnFloor_~floor); 854201#L522 assume !(4 == initPersonOnFloor_~floor); 852950#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 853857#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 853757#L2638-2 assume !(0 == callOnFloor_~floorID); 854611#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 854095#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 854263#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 854044#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 855286#L414-1 assume !(0 == initPersonOnFloor_~floor); 855246#L441-1 assume 1 == initPersonOnFloor_~floor; 855285#L442-2 assume !(0 == initPersonOnFloor_~person); 854514#L445-2 assume !(1 == initPersonOnFloor_~person); 854515#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 854657#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 854658#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 854600#L2638-5 assume !(0 == callOnFloor_~floorID); 854601#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 855255#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 855254#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 855253#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 855252#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 854388#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 854389#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 854408#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 854410#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 855249#L2148 assume !(0 != timeShift_~tmp___9~2); 854542#L2239 assume !(1 == ~doorState~0); 853024#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 853025#L1590 assume !(1 == stopRequestedInDirection_~dir); 853352#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 853353#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 854830#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 853466#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 853468#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 855250#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 853469#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 853072#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 853920#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 855043#L1966-2 assume !(1 == ~currentHeading~0); 855049#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 854988#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 853490#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 853427#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 853428#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 855140#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 862032#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 862031#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 862004#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 854030#L2724 cleanup_~i~3 := 0; 854031#L3022-2 [2021-11-02 22:20:43,096 INFO L793 eck$LassoCheckResult]: Loop: 854031#L3022-2 assume !false; 862385#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 862386#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 862368#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 862369#L3030 assume 1 != cleanup_~tmp___0~9; 862354#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 862355#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 862340#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 862341#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 862332#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 862333#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 862328#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 862329#L138-26 assume !(0 == isFloorCalling_~floorID); 862253#L142-26 assume !(1 == isFloorCalling_~floorID); 862254#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 864869#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 864868#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 862158#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 864861#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 855313#L2150-2 assume !(0 != ~persons_0~0); 864836#L2150-3 assume !(0 != ~persons_1~0); 864741#L2164-1 assume !(0 != ~persons_2~0); 864704#L2178-1 assume !(0 != ~persons_3~0); 864701#L2192-1 assume !(0 != ~persons_4~0); 864696#L2206-1 assume !(0 != ~persons_5~0); 864692#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864691#L234-12 assume !(0 == isPersonOnFloor_~floor); 864690#L267-12 assume 1 == isPersonOnFloor_~floor; 864684#L268-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864655#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 864653#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 864651#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864649#L234-14 assume 0 == isPersonOnFloor_~floor; 864632#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864617#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 864608#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 864607#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864606#L234-16 assume 0 == isPersonOnFloor_~floor; 864584#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864557#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 864555#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 864553#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864552#L234-18 assume 0 == isPersonOnFloor_~floor; 864545#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864511#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 864509#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 864507#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864506#L234-20 assume 0 == isPersonOnFloor_~floor; 864471#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864464#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 864462#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 864460#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 864458#L234-22 assume 0 == isPersonOnFloor_~floor; 864248#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 864240#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 864236#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 864234#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 864232#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 864233#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 866495#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 853086#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 866480#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 866473#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 866468#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 866456#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 866460#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 866453#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 862401#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 854031#L3022-2 [2021-11-02 22:20:43,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:43,097 INFO L85 PathProgramCache]: Analyzing trace with hash -279637308, now seen corresponding path program 1 times [2021-11-02 22:20:43,097 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:43,097 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952677988] [2021-11-02 22:20:43,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:43,097 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:43,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:43,154 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:43,154 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:43,154 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952677988] [2021-11-02 22:20:43,154 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [952677988] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:43,155 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:43,155 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:43,155 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405413876] [2021-11-02 22:20:43,155 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:43,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:43,156 INFO L85 PathProgramCache]: Analyzing trace with hash -569512774, now seen corresponding path program 2 times [2021-11-02 22:20:43,156 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:43,156 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1269146914] [2021-11-02 22:20:43,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:43,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:43,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:43,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:43,194 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:43,194 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1269146914] [2021-11-02 22:20:43,194 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1269146914] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:43,194 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:43,195 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:43,195 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329446836] [2021-11-02 22:20:43,195 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:43,196 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:43,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:43,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:43,197 INFO L87 Difference]: Start difference. First operand 22057 states and 40976 transitions. cyclomatic complexity: 18920 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:43,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:43,890 INFO L93 Difference]: Finished difference Result 65880 states and 122456 transitions. [2021-11-02 22:20:43,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:43,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65880 states and 122456 transitions. [2021-11-02 22:20:44,179 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 56685 [2021-11-02 22:20:44,399 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65880 states to 65880 states and 122456 transitions. [2021-11-02 22:20:44,399 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65880 [2021-11-02 22:20:44,449 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65880 [2021-11-02 22:20:44,450 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65880 states and 122456 transitions. [2021-11-02 22:20:44,485 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:44,485 INFO L681 BuchiCegarLoop]: Abstraction has 65880 states and 122456 transitions. [2021-11-02 22:20:44,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65880 states and 122456 transitions. [2021-11-02 22:20:44,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65880 to 22042. [2021-11-02 22:20:44,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22042 states, 22042 states have (on average 1.8577261591507124) internal successors, (40948), 22041 states have internal predecessors, (40948), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:44,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22042 states to 22042 states and 40948 transitions. [2021-11-02 22:20:44,910 INFO L704 BuchiCegarLoop]: Abstraction has 22042 states and 40948 transitions. [2021-11-02 22:20:44,910 INFO L587 BuchiCegarLoop]: Abstraction has 22042 states and 40948 transitions. [2021-11-02 22:20:44,910 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-11-02 22:20:44,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22042 states and 40948 transitions. [2021-11-02 22:20:45,158 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18895 [2021-11-02 22:20:45,158 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:45,158 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:45,163 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:45,163 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:45,164 INFO L791 eck$LassoCheckResult]: Stem: 941731#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 941732#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 941035#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 941036#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 941542#L3215 assume 0 != main_~tmp~24; 942382#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 942383#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 942660#L3272 assume !(0 == getOrigin_~person); 942661#L3276 assume !(1 == getOrigin_~person); 941681#L3280 assume !(2 == getOrigin_~person); 941682#L3284 assume !(3 == getOrigin_~person); 942620#L3288 assume !(4 == getOrigin_~person); 943062#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 941842#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 941843#L414 assume !(0 == initPersonOnFloor_~floor); 940816#L441 assume 1 == initPersonOnFloor_~floor; 940817#L442 assume !(0 == initPersonOnFloor_~person); 941379#L445 assume !(1 == initPersonOnFloor_~person); 941380#L448 assume !(2 == initPersonOnFloor_~person); 941030#L451 assume 3 == initPersonOnFloor_~person;~personOnFloor_3_1~0 := 1; 941031#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 941797#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 941697#L2638-2 assume !(0 == callOnFloor_~floorID); 942531#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 940782#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 940783#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 941840#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 943156#L414-1 assume !(0 == initPersonOnFloor_~floor); 943152#L441-1 assume 1 == initPersonOnFloor_~floor; 943008#L442-2 assume !(0 == initPersonOnFloor_~person); 942438#L445-2 assume !(1 == initPersonOnFloor_~person); 942439#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 943174#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 943172#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 943168#L2638-5 assume !(0 == callOnFloor_~floorID); 943166#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 943163#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 943162#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 943160#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 943159#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 942313#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 942314#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 942338#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 942340#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 943161#L2148 assume !(0 != timeShift_~tmp___9~2); 942465#L2239 assume !(1 == ~doorState~0); 940969#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 940970#L1590 assume !(1 == stopRequestedInDirection_~dir); 941299#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 941300#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 942746#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 941414#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 941416#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 943157#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 941417#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 941017#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 941856#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 942961#L1966-2 assume !(1 == ~currentHeading~0); 942967#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 942903#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 941439#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 941374#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 941375#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 943056#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 949547#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 949548#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 942317#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 940996#L2724 cleanup_~i~3 := 0; 941967#L3022-2 [2021-11-02 22:20:45,164 INFO L793 eck$LassoCheckResult]: Loop: 941967#L3022-2 assume !false; 949606#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 949605#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 949604#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 949603#L3030 assume 1 != cleanup_~tmp___0~9; 949602#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 949601#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 949600#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 949597#L1494 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 949598#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 955437#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 950737#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 943430#L138-26 assume !(0 == isFloorCalling_~floorID); 943431#L142-26 assume !(1 == isFloorCalling_~floorID); 943424#L146-26 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 943425#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 943420#L1999-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2;stopRequestedAtCurrentFloor_~retValue_acc~18 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 943409#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 952424#L2148-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 943405#L2150-2 assume !(0 != ~persons_0~0); 952399#L2150-3 assume !(0 != ~persons_1~0); 952374#L2164-1 assume !(0 != ~persons_2~0); 952340#L2178-1 assume !(0 != ~persons_3~0); 952337#L2192-1 assume !(0 != ~persons_4~0); 952332#L2206-1 assume !(0 != ~persons_5~0); 952328#L2220-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret65, processWaitingOnFloor_#t~ret66, processWaitingOnFloor_#t~ret67, processWaitingOnFloor_#t~ret68, processWaitingOnFloor_#t~ret69, processWaitingOnFloor_#t~ret70, processWaitingOnFloor_#t~ret71, processWaitingOnFloor_#t~ret72, processWaitingOnFloor_#t~ret73, processWaitingOnFloor_#t~ret74, processWaitingOnFloor_#t~ret75, processWaitingOnFloor_#t~ret76, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~3, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~3;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 952327#L234-12 assume !(0 == isPersonOnFloor_~floor); 952326#L267-12 assume 1 == isPersonOnFloor_~floor; 952320#L268-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 952291#L406-6 processWaitingOnFloor_#t~ret65 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~3 := processWaitingOnFloor_#t~ret65;havoc processWaitingOnFloor_#t~ret65; 952289#L2049-2 assume !(0 != processWaitingOnFloor_~tmp___0~3); 952287#L2049-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 952286#L234-14 assume 0 == isPersonOnFloor_~floor; 952265#L235-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 952250#L406-7 processWaitingOnFloor_#t~ret67 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret67;havoc processWaitingOnFloor_#t~ret67; 952241#L2062-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 952240#L2062-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 952239#L234-16 assume 0 == isPersonOnFloor_~floor; 952155#L235-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 952128#L406-8 processWaitingOnFloor_#t~ret69 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret69;havoc processWaitingOnFloor_#t~ret69; 952126#L2075-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 952124#L2075-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 952123#L234-18 assume 0 == isPersonOnFloor_~floor; 952035#L235-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 952001#L406-9 processWaitingOnFloor_#t~ret71 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret71;havoc processWaitingOnFloor_#t~ret71; 951999#L2088-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 951997#L2088-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 951996#L234-20 assume 0 == isPersonOnFloor_~floor; 951961#L235-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 951960#L406-10 processWaitingOnFloor_#t~ret73 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret73;havoc processWaitingOnFloor_#t~ret73; 951958#L2101-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 951959#L2101-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 954583#L234-22 assume 0 == isPersonOnFloor_~floor; 954554#L235-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 954547#L406-11 processWaitingOnFloor_#t~ret75 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret75;havoc processWaitingOnFloor_#t~ret75; 954545#L2114-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 954546#L2114-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 951554#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 951550#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 951549#L1357-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 941034#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 951541#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 951540#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 951537#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 949620#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 949624#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 949614#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 949607#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 941967#L3022-2 [2021-11-02 22:20:45,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:45,165 INFO L85 PathProgramCache]: Analyzing trace with hash -1644568023, now seen corresponding path program 1 times [2021-11-02 22:20:45,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:45,166 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675513583] [2021-11-02 22:20:45,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:45,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:45,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:45,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:45,232 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:45,232 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675513583] [2021-11-02 22:20:45,233 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1675513583] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:45,233 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:45,233 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:45,233 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1076571340] [2021-11-02 22:20:45,234 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:45,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:45,235 INFO L85 PathProgramCache]: Analyzing trace with hash -569512774, now seen corresponding path program 3 times [2021-11-02 22:20:45,235 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:45,235 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498857712] [2021-11-02 22:20:45,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:45,236 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:45,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:45,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:45,275 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:45,275 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498857712] [2021-11-02 22:20:45,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498857712] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:45,276 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:45,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:20:45,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1988814494] [2021-11-02 22:20:45,277 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:45,277 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:45,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:20:45,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:20:45,278 INFO L87 Difference]: Start difference. First operand 22042 states and 40948 transitions. cyclomatic complexity: 18907 Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:47,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:47,616 INFO L93 Difference]: Finished difference Result 52592 states and 95928 transitions. [2021-11-02 22:20:47,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:47,617 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52592 states and 95928 transitions. [2021-11-02 22:20:47,898 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47790 [2021-11-02 22:20:48,113 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52592 states to 52592 states and 95928 transitions. [2021-11-02 22:20:48,113 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52592 [2021-11-02 22:20:48,159 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52592 [2021-11-02 22:20:48,160 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52592 states and 95928 transitions. [2021-11-02 22:20:48,194 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:48,194 INFO L681 BuchiCegarLoop]: Abstraction has 52592 states and 95928 transitions. [2021-11-02 22:20:48,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52592 states and 95928 transitions. [2021-11-02 22:20:49,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52592 to 28783. [2021-11-02 22:20:49,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28783 states, 28783 states have (on average 1.859639370461731) internal successors, (53526), 28782 states have internal predecessors, (53526), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:49,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28783 states to 28783 states and 53526 transitions. [2021-11-02 22:20:49,190 INFO L704 BuchiCegarLoop]: Abstraction has 28783 states and 53526 transitions. [2021-11-02 22:20:49,190 INFO L587 BuchiCegarLoop]: Abstraction has 28783 states and 53526 transitions. [2021-11-02 22:20:49,190 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-11-02 22:20:49,190 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28783 states and 53526 transitions. [2021-11-02 22:20:49,306 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:20:49,307 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:49,307 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:49,313 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:49,314 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:49,319 INFO L791 eck$LassoCheckResult]: Stem: 1016387#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1016388#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1015690#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1015691#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1016197#L3215 assume 0 != main_~tmp~24; 1017044#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1017045#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1017325#L3272 assume !(0 == getOrigin_~person); 1017326#L3276 assume !(1 == getOrigin_~person); 1016338#L3280 assume !(2 == getOrigin_~person); 1016339#L3284 assume !(3 == getOrigin_~person); 1017283#L3288 assume !(4 == getOrigin_~person); 1017729#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1016498#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1016499#L414 assume !(0 == initPersonOnFloor_~floor); 1015472#L441 assume 1 == initPersonOnFloor_~floor; 1015473#L442 assume !(0 == initPersonOnFloor_~person); 1016031#L445 assume !(1 == initPersonOnFloor_~person); 1016032#L448 assume !(2 == initPersonOnFloor_~person); 1015685#L451 assume 3 == initPersonOnFloor_~person;~personOnFloor_3_1~0 := 1; 1015686#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1016453#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1016353#L2638-2 assume !(0 == callOnFloor_~floorID); 1017198#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1016688#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1017900#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1017897#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1017891#L414-1 assume !(0 == initPersonOnFloor_~floor); 1017889#L441-1 assume 1 == initPersonOnFloor_~floor; 1017881#L442-2 assume !(0 == initPersonOnFloor_~person); 1017879#L445-2 assume !(1 == initPersonOnFloor_~person); 1017871#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1017855#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1017853#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1017849#L2638-5 assume !(0 == callOnFloor_~floorID); 1017847#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1017844#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1017843#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1017842#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1017841#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1016980#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1016981#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1017000#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1017002#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1017902#L2148 assume !(0 != timeShift_~tmp___9~2); 1017132#L2239 assume !(1 == ~doorState~0); 1015624#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1015625#L1590 assume !(1 == stopRequestedInDirection_~dir); 1015953#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1015954#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1017409#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1016067#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1016069#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1017904#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1016070#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1015672#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1016512#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1017626#L1966-2 assume !(1 == ~currentHeading~0); 1017631#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1017566#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1016092#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1016029#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1016030#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1017724#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1023247#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1023243#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1023234#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1016627#L2724 cleanup_~i~3 := 0; 1016628#L3022-2 [2021-11-02 22:20:49,320 INFO L793 eck$LassoCheckResult]: Loop: 1016628#L3022-2 assume !false; 1024658#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1024657#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1024656#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1024655#L3030 assume 1 != cleanup_~tmp___0~9; 1024653#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1024652#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1024651#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1024630#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1024624#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1024622#L138-22 assume !(0 == isFloorCalling_~floorID); 1024621#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1024617#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1024596#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1024591#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1024590#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1024589#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1024587#L138-26 assume !(0 == isFloorCalling_~floorID); 1024580#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1024581#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1030297#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1030296#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1030107#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1030102#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1030097#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1030096#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1030090#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1024428#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1024426#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1024423#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1024421#L1759-2 assume !(0 == ~currentFloorID~0); 1024418#L1765-2 assume ~currentFloorID~0 > 0; 1024414#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1024409#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1024399#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1024394#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1024378#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1023355#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1023352#L1966-3 assume !(1 == ~currentHeading~0); 1023338#L1976-9 assume !(0 == ~currentFloorID~0); 1023104#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1023101#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1024070#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1024069#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1024068#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1023096#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1023097#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1018247#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1018248#L3022-2 assume !false; 1018191#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1018192#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1018183#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1018184#L3030 assume 1 != cleanup_~tmp___0~9; 1018175#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1018176#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1018167#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1018168#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1018155#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1018156#L138-22 assume !(0 == isFloorCalling_~floorID); 1018141#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1018128#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1018129#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1018111#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1018112#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1018102#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1018103#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1018096#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1018094#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1018092#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1018090#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1018087#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1018081#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1018082#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1024495#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1024482#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1024471#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1024458#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1024459#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1024440#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1024437#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1024438#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1043800#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1043794#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1024411#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1043780#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1043778#L1966-5 assume !(1 == ~currentHeading~0); 1043772#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1015688#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1015689#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1024677#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1024676#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1024675#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 1024664#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 1024668#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 1024661#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 1024659#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1016628#L3022-2 [2021-11-02 22:20:49,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:49,321 INFO L85 PathProgramCache]: Analyzing trace with hash -1644568023, now seen corresponding path program 2 times [2021-11-02 22:20:49,321 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:49,321 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1879102066] [2021-11-02 22:20:49,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:49,322 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:49,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:49,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:49,379 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:49,379 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1879102066] [2021-11-02 22:20:49,379 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1879102066] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:49,379 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:49,379 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:49,380 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1424760255] [2021-11-02 22:20:49,380 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:49,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:49,381 INFO L85 PathProgramCache]: Analyzing trace with hash -1078267605, now seen corresponding path program 1 times [2021-11-02 22:20:49,381 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:49,381 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042050865] [2021-11-02 22:20:49,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:49,382 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:49,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:49,443 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:20:49,444 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:49,444 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042050865] [2021-11-02 22:20:49,444 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042050865] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:49,444 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:49,444 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:49,445 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496937351] [2021-11-02 22:20:49,445 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:49,445 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:49,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:49,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:49,446 INFO L87 Difference]: Start difference. First operand 28783 states and 53526 transitions. cyclomatic complexity: 24744 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:49,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:49,891 INFO L93 Difference]: Finished difference Result 57455 states and 106861 transitions. [2021-11-02 22:20:49,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:49,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57455 states and 106861 transitions. [2021-11-02 22:20:50,150 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51296 [2021-11-02 22:20:50,345 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57455 states to 57455 states and 106861 transitions. [2021-11-02 22:20:50,345 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57455 [2021-11-02 22:20:50,391 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57455 [2021-11-02 22:20:50,391 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57455 states and 106861 transitions. [2021-11-02 22:20:50,423 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:50,424 INFO L681 BuchiCegarLoop]: Abstraction has 57455 states and 106861 transitions. [2021-11-02 22:20:50,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57455 states and 106861 transitions. [2021-11-02 22:20:51,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57455 to 28783. [2021-11-02 22:20:51,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28783 states, 28783 states have (on average 1.8592572004308099) internal successors, (53515), 28782 states have internal predecessors, (53515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:51,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28783 states to 28783 states and 53515 transitions. [2021-11-02 22:20:51,504 INFO L704 BuchiCegarLoop]: Abstraction has 28783 states and 53515 transitions. [2021-11-02 22:20:51,505 INFO L587 BuchiCegarLoop]: Abstraction has 28783 states and 53515 transitions. [2021-11-02 22:20:51,505 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-11-02 22:20:51,505 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28783 states and 53515 transitions. [2021-11-02 22:20:51,590 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:20:51,591 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:51,591 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:51,596 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:51,596 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:51,596 INFO L791 eck$LassoCheckResult]: Stem: 1102632#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1102633#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1101942#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1101943#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1102447#L3215 assume 0 != main_~tmp~24; 1103282#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1103283#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1103556#L3272 assume !(0 == getOrigin_~person); 1103557#L3276 assume !(1 == getOrigin_~person); 1102584#L3280 assume !(2 == getOrigin_~person); 1102585#L3284 assume !(3 == getOrigin_~person); 1103516#L3288 assume !(4 == getOrigin_~person); 1103962#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1102745#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1102746#L414 assume !(0 == initPersonOnFloor_~floor); 1101726#L441 assume 1 == initPersonOnFloor_~floor; 1101727#L442 assume !(0 == initPersonOnFloor_~person); 1102282#L445 assume !(1 == initPersonOnFloor_~person); 1102283#L448 assume !(2 == initPersonOnFloor_~person); 1101940#L451 assume !(3 == initPersonOnFloor_~person); 1101941#L454 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 1101979#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1102701#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1102598#L2638-2 assume !(0 == callOnFloor_~floorID); 1103431#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1102930#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1104106#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1104105#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1104104#L414-1 assume !(0 == initPersonOnFloor_~floor); 1104099#L441-1 assume 1 == initPersonOnFloor_~floor; 1103351#L442-2 assume !(0 == initPersonOnFloor_~person); 1103336#L445-2 assume !(1 == initPersonOnFloor_~person); 1103337#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1102511#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1103474#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1102580#L2638-5 assume !(0 == callOnFloor_~floorID); 1104079#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1104076#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1104073#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1104070#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1104069#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1103218#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1103219#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1103238#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1103240#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1104074#L2148 assume !(0 != timeShift_~tmp___9~2); 1103364#L2239 assume !(1 == ~doorState~0); 1101877#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1101878#L1590 assume !(1 == stopRequestedInDirection_~dir); 1102202#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1102203#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1103642#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1102320#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1102322#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1104065#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1102323#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1101925#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1102759#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1103859#L1966-2 assume !(1 == ~currentHeading~0); 1103864#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1103799#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1102344#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1105159#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1103954#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1101673#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1101674#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1103686#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1103221#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1101904#L2724 cleanup_~i~3 := 0; 1102869#L3022-2 [2021-11-02 22:20:51,597 INFO L793 eck$LassoCheckResult]: Loop: 1102869#L3022-2 assume !false; 1111101#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1111100#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1111099#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1111098#L3030 assume 1 != cleanup_~tmp___0~9; 1111097#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1111096#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1111095#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1111093#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1111091#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1111090#L138-22 assume !(0 == isFloorCalling_~floorID); 1111089#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1111039#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1111016#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1111011#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1111010#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1111009#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1111007#L138-26 assume !(0 == isFloorCalling_~floorID); 1111004#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1110997#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1110994#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1110991#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1110985#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1110979#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1110975#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1110971#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1104395#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1104391#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1104388#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1104352#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1104353#L1759-2 assume !(0 == ~currentFloorID~0); 1104363#L1765-2 assume ~currentFloorID~0 > 0; 1104360#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1104359#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1104338#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1104339#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1104689#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1104639#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1104621#L1966-3 assume !(1 == ~currentHeading~0); 1104612#L1976-9 assume !(0 == ~currentFloorID~0); 1104604#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1104593#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1104564#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1104561#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1104556#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1104553#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1104554#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1111065#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1111064#L3022-2 assume !false; 1111063#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1111062#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1111061#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1111060#L3030 assume 1 != cleanup_~tmp___0~9; 1111059#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1111058#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1111057#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1111056#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1111054#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1111053#L138-22 assume !(0 == isFloorCalling_~floorID); 1111052#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1104451#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1104452#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1104435#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1104436#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1104431#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1104432#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1104429#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1104428#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1104427#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1104426#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1104424#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1104423#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1104421#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1102640#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1102641#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1103798#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1103969#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1103989#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1101929#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1101930#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1103620#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1105281#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1103705#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1103706#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1106864#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1106865#L1966-5 assume !(1 == ~currentHeading~0); 1110907#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1101938#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1101939#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1111120#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1111119#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1111118#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 1111107#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 1111111#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 1111104#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 1111102#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1102869#L3022-2 [2021-11-02 22:20:51,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:51,598 INFO L85 PathProgramCache]: Analyzing trace with hash 1372165353, now seen corresponding path program 1 times [2021-11-02 22:20:51,598 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:51,598 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694444741] [2021-11-02 22:20:51,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:51,598 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:51,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:51,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:51,657 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:51,658 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694444741] [2021-11-02 22:20:51,658 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694444741] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:51,658 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:51,658 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:20:51,658 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084050324] [2021-11-02 22:20:51,659 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:51,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:51,659 INFO L85 PathProgramCache]: Analyzing trace with hash -1078267605, now seen corresponding path program 2 times [2021-11-02 22:20:51,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:51,660 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [811066286] [2021-11-02 22:20:51,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:51,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:51,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:51,722 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:20:51,722 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:51,722 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [811066286] [2021-11-02 22:20:51,722 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [811066286] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:51,723 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:51,723 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:51,723 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074716521] [2021-11-02 22:20:51,723 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:51,724 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:51,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:20:51,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:20:51,725 INFO L87 Difference]: Start difference. First operand 28783 states and 53515 transitions. cyclomatic complexity: 24733 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:52,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:52,099 INFO L93 Difference]: Finished difference Result 57455 states and 106848 transitions. [2021-11-02 22:20:52,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:20:52,099 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57455 states and 106848 transitions. [2021-11-02 22:20:52,361 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51296 [2021-11-02 22:20:52,555 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57455 states to 57455 states and 106848 transitions. [2021-11-02 22:20:52,555 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57455 [2021-11-02 22:20:52,599 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57455 [2021-11-02 22:20:52,599 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57455 states and 106848 transitions. [2021-11-02 22:20:52,630 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:52,631 INFO L681 BuchiCegarLoop]: Abstraction has 57455 states and 106848 transitions. [2021-11-02 22:20:52,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57455 states and 106848 transitions. [2021-11-02 22:20:53,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57455 to 28783. [2021-11-02 22:20:53,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28783 states, 28783 states have (on average 1.8588750303998889) internal successors, (53504), 28782 states have internal predecessors, (53504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:53,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28783 states to 28783 states and 53504 transitions. [2021-11-02 22:20:53,745 INFO L704 BuchiCegarLoop]: Abstraction has 28783 states and 53504 transitions. [2021-11-02 22:20:53,745 INFO L587 BuchiCegarLoop]: Abstraction has 28783 states and 53504 transitions. [2021-11-02 22:20:53,745 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-11-02 22:20:53,745 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28783 states and 53504 transitions. [2021-11-02 22:20:53,830 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:20:53,831 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:53,831 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:53,836 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:53,836 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:53,837 INFO L791 eck$LassoCheckResult]: Stem: 1188888#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1188889#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1188195#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1188196#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1188702#L3215 assume 0 != main_~tmp~24; 1189555#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1189556#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1189845#L3272 assume !(0 == getOrigin_~person); 1189846#L3276 assume !(1 == getOrigin_~person); 1188837#L3280 assume !(2 == getOrigin_~person); 1188838#L3284 assume !(3 == getOrigin_~person); 1189802#L3288 assume !(4 == getOrigin_~person); 1190272#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1189004#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1189005#L414 assume !(0 == initPersonOnFloor_~floor); 1187976#L441 assume 1 == initPersonOnFloor_~floor; 1187977#L442 assume !(0 == initPersonOnFloor_~person); 1188538#L445 assume !(1 == initPersonOnFloor_~person); 1188539#L448 assume !(2 == initPersonOnFloor_~person); 1188191#L451 assume !(3 == initPersonOnFloor_~person); 1188192#L454 assume !(4 == initPersonOnFloor_~person); 1188231#L457 assume !(5 == initPersonOnFloor_~person); 1188232#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1188958#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1188854#L2638-2 assume !(0 == callOnFloor_~floorID); 1189715#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1189195#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1189369#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1189002#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1190401#L414-1 assume !(0 == initPersonOnFloor_~floor); 1190402#L441-1 assume 1 == initPersonOnFloor_~floor; 1189628#L442-2 assume !(0 == initPersonOnFloor_~person); 1189612#L445-2 assume !(1 == initPersonOnFloor_~person); 1189613#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1188765#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1189758#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1188833#L2638-5 assume !(0 == callOnFloor_~floorID); 1190412#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1190409#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1190403#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1190398#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1190397#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1189490#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1189491#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1189512#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1189514#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1190408#L2148 assume !(0 != timeShift_~tmp___9~2); 1189642#L2239 assume !(1 == ~doorState~0); 1188130#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1188131#L1590 assume !(1 == stopRequestedInDirection_~dir); 1188457#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1188458#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1189933#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1188575#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1188577#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1190392#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1188578#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1188178#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1189019#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1190158#L1966-2 assume !(1 == ~currentHeading~0); 1190163#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1190096#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1188599#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1191026#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1190262#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1190263#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1196934#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1190296#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1190297#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1189132#L2724 cleanup_~i~3 := 0; 1189133#L3022-2 [2021-11-02 22:20:53,837 INFO L793 eck$LassoCheckResult]: Loop: 1189133#L3022-2 assume !false; 1197462#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1197461#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1197460#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1197459#L3030 assume 1 != cleanup_~tmp___0~9; 1197458#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1197457#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1197456#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1197454#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1197455#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1197545#L138-22 assume !(0 == isFloorCalling_~floorID); 1197536#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1197526#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1197518#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1197513#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1197512#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1197511#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1197338#L138-26 assume !(0 == isFloorCalling_~floorID); 1197339#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1197443#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1197439#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1197435#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1197431#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1197421#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1197333#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1197324#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1190728#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1190727#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1190726#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1190722#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1190721#L1759-2 assume !(0 == ~currentFloorID~0); 1190720#L1765-2 assume ~currentFloorID~0 > 0; 1190713#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1190715#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1190718#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1190719#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1192120#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1192118#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1192116#L1966-3 assume !(1 == ~currentHeading~0); 1192113#L1976-9 assume !(0 == ~currentFloorID~0); 1191615#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1191109#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1191106#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1191103#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1191101#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1191097#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1191098#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1191041#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1191042#L3022-2 assume !false; 1191037#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1191038#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1191033#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1191034#L3030 assume 1 != cleanup_~tmp___0~9; 1191029#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1191030#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1191024#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1191025#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1197303#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1197327#L138-22 assume !(0 == isFloorCalling_~floorID); 1191011#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1191000#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1191001#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1190970#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1190971#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1190952#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1190953#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1190942#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1190941#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1190940#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1190939#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1190931#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1190930#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1190928#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1188896#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1188897#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1190095#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1190278#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1188328#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1188184#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1188185#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1189908#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1192104#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1189997#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1189111#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1189763#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1189543#L1966-5 assume !(1 == ~currentHeading~0); 1189544#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1188193#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1188194#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1197481#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1197480#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1197479#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1197477#L2680-1 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1197474#L1395-6 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1197467#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1197463#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1189133#L3022-2 [2021-11-02 22:20:53,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:53,837 INFO L85 PathProgramCache]: Analyzing trace with hash 347303984, now seen corresponding path program 1 times [2021-11-02 22:20:53,838 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:53,838 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [104962965] [2021-11-02 22:20:53,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:53,838 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:53,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:53,888 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:53,889 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:53,889 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [104962965] [2021-11-02 22:20:53,889 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [104962965] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:53,889 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:53,889 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:20:53,890 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82625714] [2021-11-02 22:20:53,890 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:53,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:53,891 INFO L85 PathProgramCache]: Analyzing trace with hash -1094078163, now seen corresponding path program 1 times [2021-11-02 22:20:53,891 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:53,891 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508141620] [2021-11-02 22:20:53,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:53,891 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:53,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:53,942 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:20:53,943 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:53,943 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508141620] [2021-11-02 22:20:53,943 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508141620] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:53,943 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:53,943 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:53,943 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985358183] [2021-11-02 22:20:53,944 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:53,944 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:53,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:20:53,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:20:53,945 INFO L87 Difference]: Start difference. First operand 28783 states and 53504 transitions. cyclomatic complexity: 24722 Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 3 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:54,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:54,258 INFO L93 Difference]: Finished difference Result 57437 states and 106825 transitions. [2021-11-02 22:20:54,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:20:54,259 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57437 states and 106825 transitions. [2021-11-02 22:20:54,522 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51296 [2021-11-02 22:20:54,718 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57437 states to 57437 states and 106825 transitions. [2021-11-02 22:20:54,718 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57437 [2021-11-02 22:20:54,763 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57437 [2021-11-02 22:20:54,763 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57437 states and 106825 transitions. [2021-11-02 22:20:54,795 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:54,795 INFO L681 BuchiCegarLoop]: Abstraction has 57437 states and 106825 transitions. [2021-11-02 22:20:54,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57437 states and 106825 transitions. [2021-11-02 22:20:55,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57437 to 28783. [2021-11-02 22:20:55,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28783 states, 28783 states have (on average 1.8588402876698051) internal successors, (53503), 28782 states have internal predecessors, (53503), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:56,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28783 states to 28783 states and 53503 transitions. [2021-11-02 22:20:56,049 INFO L704 BuchiCegarLoop]: Abstraction has 28783 states and 53503 transitions. [2021-11-02 22:20:56,049 INFO L587 BuchiCegarLoop]: Abstraction has 28783 states and 53503 transitions. [2021-11-02 22:20:56,049 INFO L425 BuchiCegarLoop]: ======== Iteration 23============ [2021-11-02 22:20:56,049 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28783 states and 53503 transitions. [2021-11-02 22:20:56,147 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:20:56,147 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:20:56,147 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:20:56,152 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:56,152 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:20:56,152 INFO L791 eck$LassoCheckResult]: Stem: 1275119#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1275120#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1274426#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1274427#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1274934#L3215 assume 0 != main_~tmp~24; 1275779#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1275780#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1276071#L3272 assume !(0 == getOrigin_~person); 1276072#L3276 assume !(1 == getOrigin_~person); 1275069#L3280 assume !(2 == getOrigin_~person); 1275070#L3284 assume !(3 == getOrigin_~person); 1276032#L3288 assume !(4 == getOrigin_~person); 1276504#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1275233#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1275234#L414 assume !(0 == initPersonOnFloor_~floor); 1274207#L441 assume 1 == initPersonOnFloor_~floor; 1274208#L442 assume !(0 == initPersonOnFloor_~person); 1274769#L445 assume !(1 == initPersonOnFloor_~person); 1274770#L448 assume !(2 == initPersonOnFloor_~person); 1274422#L451 assume !(3 == initPersonOnFloor_~person); 1274423#L454 assume !(4 == initPersonOnFloor_~person); 1274462#L457 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 1274463#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1275188#L2626 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1275085#L2638-2 assume !(0 == callOnFloor_~floorID); 1275943#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1275421#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1276663#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1276661#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1276627#L414-1 assume !(0 == initPersonOnFloor_~floor); 1276628#L441-1 assume 1 == initPersonOnFloor_~floor; 1275853#L442-2 assume !(0 == initPersonOnFloor_~person); 1275854#L445-2 assume !(1 == initPersonOnFloor_~person); 1276004#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1274997#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1275984#L2626-2 assume 0 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_0~0 := 1; 1275064#L2638-5 assume !(0 == callOnFloor_~floorID); 1275934#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1274953#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1274555#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1274556#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1275384#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1275713#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1275714#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1275737#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1275739#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1276631#L2148 assume !(0 != timeShift_~tmp___9~2); 1275867#L2239 assume !(1 == ~doorState~0); 1274360#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1274361#L1590 assume !(1 == stopRequestedInDirection_~dir); 1274691#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1274692#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1276160#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1274805#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1274807#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1276621#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1274808#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1274409#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1275248#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1276396#L1966-2 assume !(1 == ~currentHeading~0); 1276401#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1276333#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1274829#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1274767#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1274768#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1274156#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1274157#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1276209#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1283429#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1275359#L2724 cleanup_~i~3 := 0; 1275360#L3022-2 [2021-11-02 22:20:56,153 INFO L793 eck$LassoCheckResult]: Loop: 1275360#L3022-2 assume !false; 1283607#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1283603#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1283604#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1283599#L3030 assume 1 != cleanup_~tmp___0~9; 1283600#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1283595#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1283596#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1283591#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1283589#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1283587#L138-22 assume !(0 == isFloorCalling_~floorID); 1283576#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1283573#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1283553#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1283549#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1283544#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1283545#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1283494#L138-26 assume !(0 == isFloorCalling_~floorID); 1283495#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1302020#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1275345#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1275347#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1274614#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1274615#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1276156#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1276157#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1279566#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1277200#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1277201#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1277158#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1277159#L1759-2 assume !(0 == ~currentFloorID~0); 1277170#L1765-2 assume ~currentFloorID~0 > 0; 1277167#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1277166#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1277142#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1277130#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1277033#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1277034#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1279348#L1966-3 assume !(1 == ~currentHeading~0); 1279339#L1976-9 assume !(0 == ~currentFloorID~0); 1279332#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1279327#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1283541#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1283540#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1283539#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1279312#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1279313#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1283520#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1283519#L3022-2 assume !false; 1283518#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1283517#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1283516#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1283515#L3030 assume 1 != cleanup_~tmp___0~9; 1283514#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1283513#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1283512#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1283511#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1283510#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1283509#L138-22 assume !(0 == isFloorCalling_~floorID); 1283508#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1277358#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1277359#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1277342#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1277343#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1277312#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1277313#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1277306#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1277305#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1277304#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1277303#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1277301#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1277300#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1277298#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1275126#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1275127#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1276332#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1276512#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1276541#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1277229#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1276133#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1276135#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1278124#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1276227#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1274627#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1275991#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1283400#L1966-5 assume !(1 == ~currentHeading~0); 1283398#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1274424#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1274425#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1290355#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1290354#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1290353#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 1283618#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 1283622#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 1283612#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 1283611#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1275360#L3022-2 [2021-11-02 22:20:56,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:56,154 INFO L85 PathProgramCache]: Analyzing trace with hash 362822702, now seen corresponding path program 1 times [2021-11-02 22:20:56,154 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:56,154 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292607637] [2021-11-02 22:20:56,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:56,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:56,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:56,245 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:20:56,245 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:56,245 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292607637] [2021-11-02 22:20:56,245 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292607637] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:56,246 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:56,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:56,246 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [670402304] [2021-11-02 22:20:56,246 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:20:56,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:20:56,250 INFO L85 PathProgramCache]: Analyzing trace with hash -1078267605, now seen corresponding path program 3 times [2021-11-02 22:20:56,250 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:20:56,251 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [391257601] [2021-11-02 22:20:56,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:20:56,251 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:20:56,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:20:56,319 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:20:56,319 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:20:56,320 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [391257601] [2021-11-02 22:20:56,320 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [391257601] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:20:56,320 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:20:56,320 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:20:56,321 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485934655] [2021-11-02 22:20:56,321 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:20:56,321 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:20:56,322 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:20:56,322 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:20:56,322 INFO L87 Difference]: Start difference. First operand 28783 states and 53503 transitions. cyclomatic complexity: 24721 Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 7 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:20:57,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:20:57,356 INFO L93 Difference]: Finished difference Result 114789 states and 213522 transitions. [2021-11-02 22:20:57,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:20:57,357 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 114789 states and 213522 transitions. [2021-11-02 22:20:58,565 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 102592 [2021-11-02 22:20:58,928 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 114789 states to 114789 states and 213522 transitions. [2021-11-02 22:20:58,928 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 114789 [2021-11-02 22:20:59,040 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 114789 [2021-11-02 22:20:59,040 INFO L73 IsDeterministic]: Start isDeterministic. Operand 114789 states and 213522 transitions. [2021-11-02 22:20:59,095 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:20:59,096 INFO L681 BuchiCegarLoop]: Abstraction has 114789 states and 213522 transitions. [2021-11-02 22:20:59,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114789 states and 213522 transitions. [2021-11-02 22:20:59,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114789 to 28787. [2021-11-02 22:20:59,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28787 states, 28787 states have (on average 1.8586862125264876) internal successors, (53506), 28786 states have internal predecessors, (53506), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:00,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28787 states to 28787 states and 53506 transitions. [2021-11-02 22:21:00,357 INFO L704 BuchiCegarLoop]: Abstraction has 28787 states and 53506 transitions. [2021-11-02 22:21:00,357 INFO L587 BuchiCegarLoop]: Abstraction has 28787 states and 53506 transitions. [2021-11-02 22:21:00,357 INFO L425 BuchiCegarLoop]: ======== Iteration 24============ [2021-11-02 22:21:00,357 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28787 states and 53506 transitions. [2021-11-02 22:21:00,438 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:00,438 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:21:00,439 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:21:00,443 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:00,443 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:00,444 INFO L791 eck$LassoCheckResult]: Stem: 1418717#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1418718#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1418025#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1418026#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1418531#L3215 assume 0 != main_~tmp~24; 1419386#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1419387#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1419677#L3272 assume !(0 == getOrigin_~person); 1419678#L3276 assume !(1 == getOrigin_~person); 1418667#L3280 assume !(2 == getOrigin_~person); 1418668#L3284 assume !(3 == getOrigin_~person); 1419635#L3288 assume !(4 == getOrigin_~person); 1420088#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1418834#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1418835#L414 assume !(0 == initPersonOnFloor_~floor); 1417809#L441 assume 1 == initPersonOnFloor_~floor; 1417810#L442 assume !(0 == initPersonOnFloor_~person); 1418367#L445 assume !(1 == initPersonOnFloor_~person); 1418368#L448 assume !(2 == initPersonOnFloor_~person); 1418023#L451 assume !(3 == initPersonOnFloor_~person); 1418024#L454 assume !(4 == initPersonOnFloor_~person); 1418061#L457 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 1418062#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1418788#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1418682#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1418683#L2638-2 assume !(0 == callOnFloor_~floorID); 1419546#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1417773#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1417774#L3272-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1418832#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1420211#L414-1 assume !(0 == initPersonOnFloor_~floor); 1420228#L441-1 assume 1 == initPersonOnFloor_~floor; 1419459#L442-2 assume !(0 == initPersonOnFloor_~person); 1419460#L445-2 assume !(1 == initPersonOnFloor_~person); 1419604#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1418596#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1419589#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1419479#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1418663#L2638-5 assume !(0 == callOnFloor_~floorID); 1420219#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1420216#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1420215#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1420212#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1420208#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1419317#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1419318#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1419341#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1419343#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1420213#L2148 assume !(0 != timeShift_~tmp___9~2); 1419475#L2239 assume !(1 == ~doorState~0); 1417960#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1417961#L1590 assume !(1 == stopRequestedInDirection_~dir); 1418287#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1418288#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1419760#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1418403#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1418405#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1420206#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1418406#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1418008#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1418848#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1419980#L1966-2 assume !(1 == ~currentHeading~0); 1419987#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1419919#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1418427#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1420846#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1420079#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1417756#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1417757#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1419809#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1420108#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1418958#L2724 cleanup_~i~3 := 0; 1418959#L3022-2 [2021-11-02 22:21:00,444 INFO L793 eck$LassoCheckResult]: Loop: 1418959#L3022-2 assume !false; 1427202#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1427201#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1427200#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1427199#L3030 assume 1 != cleanup_~tmp___0~9; 1427198#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1427197#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1427196#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1427194#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1427195#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1427268#L138-22 assume !(0 == isFloorCalling_~floorID); 1437020#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1437006#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1436982#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1436966#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1436964#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1436962#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1436960#L138-26 assume !(0 == isFloorCalling_~floorID); 1436957#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1436955#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1436954#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1436952#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1436950#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1436942#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1436939#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1436936#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1436933#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1421400#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1421399#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1421397#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1421398#L1759-2 assume !(0 == ~currentFloorID~0); 1421788#L1765-2 assume ~currentFloorID~0 > 0; 1421787#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1421786#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1420568#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1420569#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1421335#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1421164#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1421163#L1966-3 assume !(1 == ~currentHeading~0); 1421160#L1976-9 assume !(0 == ~currentFloorID~0); 1421057#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1421048#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1421047#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1421046#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1421044#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1421045#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1421066#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1420972#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1420973#L3022-2 assume !false; 1420968#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1420969#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1420964#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1420965#L3030 assume 1 != cleanup_~tmp___0~9; 1420960#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1420961#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1420956#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1420957#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1427100#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1427137#L138-22 assume !(0 == isFloorCalling_~floorID); 1429826#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1429822#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1429791#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1429785#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1429783#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1429781#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1429779#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1420858#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1420857#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1420856#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1420855#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1420853#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1420852#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1420841#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1418725#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1418726#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1419918#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1420096#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1418158#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1418012#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1418013#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1419736#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1422080#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1419828#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1419296#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1426944#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1426945#L1966-5 assume !(1 == ~currentHeading~0); 1427008#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1418021#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1418022#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1427221#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1427220#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1427219#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1427217#L2680-1 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1427214#L1395-6 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1427207#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1427203#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1418959#L3022-2 [2021-11-02 22:21:00,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:00,444 INFO L85 PathProgramCache]: Analyzing trace with hash 1856361587, now seen corresponding path program 1 times [2021-11-02 22:21:00,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:00,445 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770366729] [2021-11-02 22:21:00,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:00,445 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:00,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:00,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:21:00,529 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:00,529 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1770366729] [2021-11-02 22:21:00,530 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1770366729] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:00,530 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:00,530 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:21:00,530 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760025395] [2021-11-02 22:21:00,531 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:21:00,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:00,532 INFO L85 PathProgramCache]: Analyzing trace with hash -1094078163, now seen corresponding path program 2 times [2021-11-02 22:21:00,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:00,532 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1304460655] [2021-11-02 22:21:00,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:00,533 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:00,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:00,591 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:21:00,591 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:00,591 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1304460655] [2021-11-02 22:21:00,591 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1304460655] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:00,591 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:00,592 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:21:00,592 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [925576287] [2021-11-02 22:21:00,594 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:21:00,594 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:21:00,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:21:00,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:21:00,595 INFO L87 Difference]: Start difference. First operand 28787 states and 53506 transitions. cyclomatic complexity: 24720 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:00,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:21:00,759 INFO L93 Difference]: Finished difference Result 28755 states and 53454 transitions. [2021-11-02 22:21:00,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:21:00,760 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28755 states and 53454 transitions. [2021-11-02 22:21:00,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:00,978 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28755 states to 28755 states and 53454 transitions. [2021-11-02 22:21:00,978 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28755 [2021-11-02 22:21:01,000 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28755 [2021-11-02 22:21:01,000 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28755 states and 53454 transitions. [2021-11-02 22:21:01,016 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:21:01,016 INFO L681 BuchiCegarLoop]: Abstraction has 28755 states and 53454 transitions. [2021-11-02 22:21:01,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28755 states and 53454 transitions. [2021-11-02 22:21:01,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28755 to 28755. [2021-11-02 22:21:01,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28755 states, 28755 states have (on average 1.858946270213876) internal successors, (53454), 28754 states have internal predecessors, (53454), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:01,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28755 states to 28755 states and 53454 transitions. [2021-11-02 22:21:01,341 INFO L704 BuchiCegarLoop]: Abstraction has 28755 states and 53454 transitions. [2021-11-02 22:21:01,341 INFO L587 BuchiCegarLoop]: Abstraction has 28755 states and 53454 transitions. [2021-11-02 22:21:01,341 INFO L425 BuchiCegarLoop]: ======== Iteration 25============ [2021-11-02 22:21:01,341 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28755 states and 53454 transitions. [2021-11-02 22:21:01,423 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:01,423 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:21:01,423 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:21:01,427 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:01,427 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:01,428 INFO L791 eck$LassoCheckResult]: Stem: 1476260#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1476261#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1475574#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1475575#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1476075#L3215 assume 0 != main_~tmp~24; 1476902#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1476903#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1477185#L3272 assume !(0 == getOrigin_~person); 1477186#L3276 assume !(1 == getOrigin_~person); 1476210#L3280 assume !(2 == getOrigin_~person); 1476211#L3284 assume !(3 == getOrigin_~person); 1477146#L3288 assume !(4 == getOrigin_~person); 1477587#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1476370#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1476371#L414 assume !(0 == initPersonOnFloor_~floor); 1475357#L441 assume 1 == initPersonOnFloor_~floor; 1475358#L442 assume !(0 == initPersonOnFloor_~person); 1475911#L445 assume !(1 == initPersonOnFloor_~person); 1475912#L448 assume !(2 == initPersonOnFloor_~person); 1475570#L451 assume !(3 == initPersonOnFloor_~person); 1475571#L454 assume !(4 == initPersonOnFloor_~person); 1475610#L457 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 1475611#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1476326#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1476225#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1476226#L2638-2 assume !(0 == callOnFloor_~floorID); 1477058#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1476554#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1477734#L3272-1 assume !(0 == getOrigin_~person); 1477733#L3276-1 assume !(1 == getOrigin_~person); 1477732#L3280-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~24 := 2;getOrigin_#res := getOrigin_~retValue_acc~24; 1477730#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1477729#L414-1 assume !(0 == initPersonOnFloor_~floor); 1477728#L441-1 assume 1 == initPersonOnFloor_~floor; 1477725#L442-2 assume !(0 == initPersonOnFloor_~person); 1477719#L445-2 assume !(1 == initPersonOnFloor_~person); 1477705#L448-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1477700#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1477699#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1477698#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1477694#L2638-5 assume !(0 == callOnFloor_~floorID); 1477692#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1477689#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1477688#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1477687#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1477685#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1476840#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1476841#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1476862#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1476864#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1477731#L2148 assume !(0 != timeShift_~tmp___9~2); 1476987#L2239 assume !(1 == ~doorState~0); 1475509#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1475510#L1590 assume !(1 == stopRequestedInDirection_~dir); 1475834#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1475835#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1477273#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1475949#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1475951#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1477684#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1475952#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1475557#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1476384#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1477495#L1966-2 assume !(1 == ~currentHeading~0); 1477500#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1477435#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1475973#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1475909#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1475910#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1475309#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1475310#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1477323#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1476842#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1475536#L2724 cleanup_~i~3 := 0; 1484609#L3022-2 [2021-11-02 22:21:01,428 INFO L793 eck$LassoCheckResult]: Loop: 1484609#L3022-2 assume !false; 1484610#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1484605#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1484606#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1484601#L3030 assume 1 != cleanup_~tmp___0~9; 1484602#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1484597#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1484598#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1484592#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1484594#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1484584#L138-22 assume !(0 == isFloorCalling_~floorID); 1484585#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1491465#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1484551#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1484547#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1484542#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1484543#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1487859#L138-26 assume !(0 == isFloorCalling_~floorID); 1487860#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1491452#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1501272#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1501271#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1501270#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1501266#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1501264#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1501258#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1501256#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1480631#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1480629#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1480626#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1480627#L1759-2 assume !(0 == ~currentFloorID~0); 1480840#L1765-2 assume ~currentFloorID~0 > 0; 1480839#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1480838#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1480837#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1480203#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1480184#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1480129#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1480111#L1966-3 assume !(1 == ~currentHeading~0); 1480103#L1976-9 assume !(0 == ~currentFloorID~0); 1480096#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1480091#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1480084#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1480085#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1484539#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1480075#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1480076#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1478166#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1478167#L3022-2 assume !false; 1478162#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1478163#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1478158#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1478159#L3030 assume 1 != cleanup_~tmp___0~9; 1478154#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1478155#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1478150#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1478151#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1478144#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1478146#L138-22 assume !(0 == isFloorCalling_~floorID); 1478130#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1478117#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1478118#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1478101#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1478102#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1478097#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1478098#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1478094#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1478093#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1478092#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1478091#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1478089#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1478088#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1478086#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1478085#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1478084#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1478082#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1477609#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1477610#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1483606#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1483604#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1483596#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1483597#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1477340#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1477341#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1483502#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1476891#L1966-5 assume !(1 == ~currentHeading~0); 1476892#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1476450#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1491038#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1491484#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1491483#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1491482#L2678-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0); 1484627#L2693-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0); 1484631#L2708-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0); 1484621#L2723-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0); 1484620#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1484609#L3022-2 [2021-11-02 22:21:01,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:01,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1851113554, now seen corresponding path program 1 times [2021-11-02 22:21:01,429 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:01,429 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221668947] [2021-11-02 22:21:01,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:01,430 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:01,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:01,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:21:01,498 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:01,498 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221668947] [2021-11-02 22:21:01,499 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221668947] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:01,499 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:01,499 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:21:01,499 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937761422] [2021-11-02 22:21:01,500 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:21:01,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:01,500 INFO L85 PathProgramCache]: Analyzing trace with hash -1078267605, now seen corresponding path program 4 times [2021-11-02 22:21:01,500 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:01,501 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504687960] [2021-11-02 22:21:01,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:01,501 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:01,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:01,556 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:21:01,556 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:01,556 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504687960] [2021-11-02 22:21:01,556 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504687960] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:01,557 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:01,557 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:21:01,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134350548] [2021-11-02 22:21:01,558 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:21:01,558 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:21:01,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:21:01,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:21:01,559 INFO L87 Difference]: Start difference. First operand 28755 states and 53454 transitions. cyclomatic complexity: 24700 Second operand has 5 states, 5 states have (on average 14.8) internal successors, (74), 5 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:01,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:21:01,779 INFO L93 Difference]: Finished difference Result 28743 states and 53436 transitions. [2021-11-02 22:21:01,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:21:01,780 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28743 states and 53436 transitions. [2021-11-02 22:21:01,909 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:02,453 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28743 states to 28743 states and 53436 transitions. [2021-11-02 22:21:02,453 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28743 [2021-11-02 22:21:02,474 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28743 [2021-11-02 22:21:02,474 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28743 states and 53436 transitions. [2021-11-02 22:21:02,488 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:21:02,489 INFO L681 BuchiCegarLoop]: Abstraction has 28743 states and 53436 transitions. [2021-11-02 22:21:02,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28743 states and 53436 transitions. [2021-11-02 22:21:02,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28743 to 28743. [2021-11-02 22:21:02,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28743 states, 28743 states have (on average 1.8590961277528442) internal successors, (53436), 28742 states have internal predecessors, (53436), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:02,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28743 states to 28743 states and 53436 transitions. [2021-11-02 22:21:02,796 INFO L704 BuchiCegarLoop]: Abstraction has 28743 states and 53436 transitions. [2021-11-02 22:21:02,796 INFO L587 BuchiCegarLoop]: Abstraction has 28743 states and 53436 transitions. [2021-11-02 22:21:02,796 INFO L425 BuchiCegarLoop]: ======== Iteration 26============ [2021-11-02 22:21:02,796 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28743 states and 53436 transitions. [2021-11-02 22:21:02,882 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:02,882 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:21:02,882 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:21:02,889 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:02,890 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:21:02,892 INFO L791 eck$LassoCheckResult]: Stem: 1533785#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(10);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string90.base, #t~string90.offset, 1);call write~init~int(95, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(93, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string92.base, #t~string92.offset, 1);call write~init~int(93, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(32, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(97, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(116, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(32, #t~string94.base, 3 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 4 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string96.base, #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 2 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(10);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string100.base, #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 2 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string102.base, #t~string102.offset, 1);call write~init~int(111, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(119, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(110, #t~string102.base, 3 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 4 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string104.base, #t~string104.offset, 1);call write~init~int(73, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(76, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 3 + #t~string104.offset, 1);call write~init~int(112, #t~string104.base, 4 + #t~string104.offset, 1);call write~init~int(58, #t~string104.base, 5 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 6 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(37, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 3 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string110.base, #t~string110.offset, 1);call write~init~int(37, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 2 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 3 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string114.base, #t~string114.offset, 1);call write~init~int(37, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(105, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(70, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 5 + #t~string116.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(37, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 3 + #t~string119.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string133.base, #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 1 + #t~string133.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~cleanupTimeShifts~0 := 12; 1533786#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1533090#L1138 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1533091#L1146 main_#t~ret160 := valid_product_#res;main_~tmp~24 := main_#t~ret160;havoc main_#t~ret160; 1533599#L3215 assume 0 != main_~tmp~24; 1534436#L3190 ~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1534437#L2619 havoc bigMacCall_#t~ret153, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1534712#L3272 assume !(0 == getOrigin_~person); 1534713#L3276 assume !(1 == getOrigin_~person); 1533736#L3280 assume !(2 == getOrigin_~person); 1533737#L3284 assume !(3 == getOrigin_~person); 1534671#L3288 assume !(4 == getOrigin_~person); 1535110#L3292 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1533894#L3297 bigMacCall_#t~ret153 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret153;havoc bigMacCall_#t~ret153;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1533895#L414 assume !(0 == initPersonOnFloor_~floor); 1532874#L441 assume 1 == initPersonOnFloor_~floor; 1532875#L442 assume !(0 == initPersonOnFloor_~person); 1533434#L445 assume !(1 == initPersonOnFloor_~person); 1533435#L448 assume !(2 == initPersonOnFloor_~person); 1533088#L451 assume !(3 == initPersonOnFloor_~person); 1533089#L454 assume !(4 == initPersonOnFloor_~person); 1533126#L457 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 1533127#L522-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1533852#L2626 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1533750#L2629 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1533751#L2638-2 assume !(0 == callOnFloor_~floorID); 1534586#L209 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1532841#L218-2 havoc angelinaCall_#t~ret150, angelinaCall_~tmp~18;havoc angelinaCall_~tmp~18;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1532842#L3272-1 assume !(0 == getOrigin_~person); 1533892#L3276-1 assume !(1 == getOrigin_~person); 1533893#L3280-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~24 := 2;getOrigin_#res := getOrigin_~retValue_acc~24; 1534374#L3297-1 angelinaCall_#t~ret150 := getOrigin_#res;angelinaCall_~tmp~18 := angelinaCall_#t~ret150;havoc angelinaCall_#t~ret150;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1534375#L414-1 assume !(0 == initPersonOnFloor_~floor); 1535260#L441-1 assume !(1 == initPersonOnFloor_~floor); 1535258#L468-1 assume !(2 == initPersonOnFloor_~floor); 1535250#L495-1 assume !(3 == initPersonOnFloor_~floor); 1535239#L522-2 assume !(4 == initPersonOnFloor_~floor); 1535238#L522-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID, callOnFloor_~__utac__ad__arg1~0;callOnFloor_~floorID := callOnFloor_#in~floorID;havoc callOnFloor_~__utac__ad__arg1~0;callOnFloor_~__utac__ad__arg1~0 := callOnFloor_~floorID;__utac_acc__Specification1_spec__2_#in~floor := callOnFloor_~__utac__ad__arg1~0;havoc __utac_acc__Specification1_spec__2_~floor;__utac_acc__Specification1_spec__2_~floor := __utac_acc__Specification1_spec__2_#in~floor; 1535236#L2626-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor); 1535235#L2629-2 assume 1 == __utac_acc__Specification1_spec__2_~floor;~landingButtons_spc1_1~0 := 1; 1535231#L2638-5 assume !(0 == callOnFloor_~floorID); 1535229#L209-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1535226#L218-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~22, cleanup_~tmp___0~9, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~9;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1535225#L138 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1535224#L165 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1535222#L1999 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1534372#L1403 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1534373#L1424 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1534395#L2006 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1534397#L2011 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1535237#L2148 assume !(0 != timeShift_~tmp___9~2); 1534517#L2239 assume !(1 == ~doorState~0); 1533025#L2239-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1533026#L1590 assume !(1 == stopRequestedInDirection_~dir); 1533353#L1759 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1533354#L1912 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1534795#L2247 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1533472#L2021 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1533474#L2026 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1535221#L1590-1 assume !(1 == stopRequestedInDirection_~dir); 1533475#L1759-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1533073#L1912-1 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1533908#L2256 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1535007#L1966-2 assume !(1 == ~currentHeading~0); 1535012#L1976-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1534949#L1976-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1533496#L1982-5 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1533430#L1386 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1533431#L2664 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1532824#L2678 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1532825#L2680 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1534847#L1395-1 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1534376#L2684 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1533052#L2724 cleanup_~i~3 := 0; 1534020#L3022-2 [2021-11-02 22:21:02,893 INFO L793 eck$LassoCheckResult]: Loop: 1534020#L3022-2 assume !false; 1548951#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1548950#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1548949#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1548948#L3030 assume 1 != cleanup_~tmp___0~9; 1548947#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1548946#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1548945#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1548943#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1548941#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1548940#L138-22 assume !(0 == isFloorCalling_~floorID); 1548939#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1548935#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1542182#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1542178#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1542173#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1542174#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1545435#L138-26 assume !(0 == isFloorCalling_~floorID); 1545436#L142-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1548916#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1548912#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1548913#L1403-1 assume !(0 == buttonForFloorIsPressed_~floorID); 1548899#L1407-1 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1548892#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1548888#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1542136#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1538041#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1538040#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1538039#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1538037#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1538038#L1759-2 assume !(0 == ~currentFloorID~0); 1538852#L1765-2 assume ~currentFloorID~0 > 0; 1538845#L1766-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1538844#L138-32 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1538843#L165-32 stopRequestedInDirection_#t~ret57 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret57;havoc stopRequestedInDirection_#t~ret57; 1537858#L1770-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~16 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1537845#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1537689#L2247-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1537636#L1966-3 assume !(1 == ~currentHeading~0); 1537633#L1976-9 assume !(0 == ~currentFloorID~0); 1537621#L1976-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1537616#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1537610#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1537606#L2664-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0; 1537604#L2665-1 assume 0 != ~landingButtons_spc1_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1537605#L1395-5 __utac_acc__Specification1_spec__3_#t~ret136 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___4~3 := __utac_acc__Specification1_spec__3_#t~ret136;havoc __utac_acc__Specification1_spec__3_#t~ret136; 1537640#L2669-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3;~landingButtons_spc1_0~0 := 0; 1535786#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1535787#L3022-2 assume !false; 1535776#L3023 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1535777#L3026 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1535772#L1233 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~9 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1535773#L3030 assume 1 != cleanup_~tmp___0~9; 1535767#L3030-1 havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~15, isIdle_~tmp~6;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~6;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~5, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~5;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1535768#L138-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1535762#L165-21 anyStopRequested_#t~ret45 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1535763#L1494 assume !(0 != anyStopRequested_~tmp___3~0); 1535756#L1498 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1535758#L138-22 assume !(0 == isFloorCalling_~floorID); 1535753#L142-22 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1535734#L165-22 anyStopRequested_#t~ret46 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret46;havoc anyStopRequested_#t~ret46; 1535735#L1505 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1535699#L1558 isIdle_#t~ret50 := anyStopRequested_#res;isIdle_~tmp~6 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~6 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1535700#L1571 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1535694#L3042 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret77, timeShift_#t~ret78, timeShift_#t~ret79, timeShift_#t~ret80, timeShift_#t~ret81, timeShift_#t~ret82, timeShift_#t~ret83, timeShift_#t~ret84, timeShift_#t~ret85, timeShift_#t~ret86, timeShift_#t~ret87, timeShift_~tmp~11, timeShift_~tmp___0~4, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~4;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret63, stopRequestedAtCurrentFloor_#t~ret64, stopRequestedAtCurrentFloor_~retValue_acc~18, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~2;havoc stopRequestedAtCurrentFloor_~retValue_acc~18;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1535695#L138-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1535690#L165-26 stopRequestedAtCurrentFloor_#t~ret63 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~2 := stopRequestedAtCurrentFloor_#t~ret63;havoc stopRequestedAtCurrentFloor_#t~ret63; 1535689#L1999-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1535688#L1403-1 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1535687#L1424-1 stopRequestedAtCurrentFloor_#t~ret64 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret64;havoc stopRequestedAtCurrentFloor_#t~ret64; 1535685#L2006-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);stopRequestedAtCurrentFloor_~retValue_acc~18 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~18; 1535684#L2011-1 timeShift_#t~ret77 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret77;havoc timeShift_#t~ret77; 1535682#L2148-1 assume !(0 != timeShift_~tmp___9~2); 1535681#L2239-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1535680#L2239-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1535679#L1590-2 assume !(1 == stopRequestedInDirection_~dir); 1535140#L1759-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1533223#L1912-2 timeShift_#t~ret84 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret84;havoc timeShift_#t~ret84; 1533077#L2247-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~19;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~19; 1533078#L2021-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~19 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~19; 1534770#L2026-2 timeShift_#t~ret85 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret85;havoc timeShift_#t~ret85;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret51, stopRequestedInDirection_#t~ret52, stopRequestedInDirection_#t~ret53, stopRequestedInDirection_#t~ret54, stopRequestedInDirection_#t~ret55, stopRequestedInDirection_#t~ret56, stopRequestedInDirection_#t~ret57, stopRequestedInDirection_#t~ret58, stopRequestedInDirection_#t~ret59, stopRequestedInDirection_#t~ret60, stopRequestedInDirection_#t~ret61, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~16, stopRequestedInDirection_~tmp~7, stopRequestedInDirection_~tmp___0~1, stopRequestedInDirection_~tmp___1~1, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~16;havoc stopRequestedInDirection_~tmp~7;havoc stopRequestedInDirection_~tmp___0~1;havoc stopRequestedInDirection_~tmp___1~1;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1534952#L1590-3 assume !(1 == stopRequestedInDirection_~dir); 1534864#L1759-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~16; 1533288#L1912-3 timeShift_#t~ret86 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret86;havoc timeShift_#t~ret86; 1535017#L2256-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret62, continueInDirection_~dir, continueInDirection_~tmp~8;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~8;~currentHeading~0 := continueInDirection_~dir; 1535018#L1966-5 assume !(1 == ~currentHeading~0); 1542050#L1976-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1533086#L1976-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1533087#L1982-11 havoc __utac_acc__Specification1_spec__3_#t~ret135, __utac_acc__Specification1_spec__3_#t~ret136, __utac_acc__Specification1_spec__3_#t~ret137, __utac_acc__Specification1_spec__3_#t~ret138, __utac_acc__Specification1_spec__3_#t~ret139, __utac_acc__Specification1_spec__3_#t~ret140, __utac_acc__Specification1_spec__3_~floor~0, __utac_acc__Specification1_spec__3_~tmp~13, __utac_acc__Specification1_spec__3_~tmp___0~6, __utac_acc__Specification1_spec__3_~tmp___1~5, __utac_acc__Specification1_spec__3_~tmp___2~5, __utac_acc__Specification1_spec__3_~tmp___3~5, __utac_acc__Specification1_spec__3_~tmp___4~3;havoc __utac_acc__Specification1_spec__3_~floor~0;havoc __utac_acc__Specification1_spec__3_~tmp~13;havoc __utac_acc__Specification1_spec__3_~tmp___0~6;havoc __utac_acc__Specification1_spec__3_~tmp___1~5;havoc __utac_acc__Specification1_spec__3_~tmp___2~5;havoc __utac_acc__Specification1_spec__3_~tmp___3~5;havoc __utac_acc__Specification1_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1548963#L1386-1 __utac_acc__Specification1_spec__3_#t~ret135 := getCurrentFloorID_#res;__utac_acc__Specification1_spec__3_~tmp~13 := __utac_acc__Specification1_spec__3_#t~ret135;havoc __utac_acc__Specification1_spec__3_#t~ret135;__utac_acc__Specification1_spec__3_~floor~0 := __utac_acc__Specification1_spec__3_~tmp~13; 1548962#L2664-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0); 1548961#L2678-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0; 1548960#L2680-1 assume 0 != ~landingButtons_spc1_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~10;havoc areDoorsOpen_~retValue_acc~10;areDoorsOpen_~retValue_acc~10 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~10; 1548959#L1395-6 __utac_acc__Specification1_spec__3_#t~ret137 := areDoorsOpen_#res;__utac_acc__Specification1_spec__3_~tmp___3~5 := __utac_acc__Specification1_spec__3_#t~ret137;havoc __utac_acc__Specification1_spec__3_#t~ret137; 1548955#L2684-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5;~landingButtons_spc1_1~0 := 0; 1548952#L2724-1 cleanup_~i~3 := 1 + cleanup_~i~3; 1534020#L3022-2 [2021-11-02 22:21:02,894 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:02,894 INFO L85 PathProgramCache]: Analyzing trace with hash -1166666962, now seen corresponding path program 1 times [2021-11-02 22:21:02,894 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:02,895 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033023345] [2021-11-02 22:21:02,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:02,895 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:02,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:02,965 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:21:02,966 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:02,966 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033023345] [2021-11-02 22:21:02,966 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033023345] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:02,966 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:02,967 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:21:02,967 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2016919891] [2021-11-02 22:21:02,967 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:21:02,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:21:02,968 INFO L85 PathProgramCache]: Analyzing trace with hash -1094078163, now seen corresponding path program 3 times [2021-11-02 22:21:02,968 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:21:02,968 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577456739] [2021-11-02 22:21:02,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:21:02,969 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:21:02,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:21:03,035 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-02 22:21:03,035 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:21:03,035 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577456739] [2021-11-02 22:21:03,035 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577456739] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:21:03,036 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:21:03,036 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:21:03,036 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338180013] [2021-11-02 22:21:03,037 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:21:03,037 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:21:03,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:21:03,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:21:03,040 INFO L87 Difference]: Start difference. First operand 28743 states and 53436 transitions. cyclomatic complexity: 24694 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:03,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:21:03,164 INFO L93 Difference]: Finished difference Result 28715 states and 53394 transitions. [2021-11-02 22:21:03,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-02 22:21:03,164 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28715 states and 53394 transitions. [2021-11-02 22:21:03,288 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25648 [2021-11-02 22:21:03,381 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28715 states to 28715 states and 53394 transitions. [2021-11-02 22:21:03,381 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28715 [2021-11-02 22:21:03,404 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28715 [2021-11-02 22:21:03,404 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28715 states and 53394 transitions. [2021-11-02 22:21:03,421 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:21:03,421 INFO L681 BuchiCegarLoop]: Abstraction has 28715 states and 53394 transitions. [2021-11-02 22:21:03,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28715 states and 53394 transitions. [2021-11-02 22:21:03,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28715 to 28715. [2021-11-02 22:21:03,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28715 states, 28715 states have (on average 1.8594462824307854) internal successors, (53394), 28714 states have internal predecessors, (53394), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:21:04,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28715 states to 28715 states and 53394 transitions. [2021-11-02 22:21:04,253 INFO L704 BuchiCegarLoop]: Abstraction has 28715 states and 53394 transitions. [2021-11-02 22:21:04,253 INFO L587 BuchiCegarLoop]: Abstraction has 28715 states and 53394 transitions. [2021-11-02 22:21:04,253 INFO L425 BuchiCegarLoop]: ======== Iteration 27============ [2021-11-02 22:21:04,254 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28715 states and 53394 transitions.