./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f8e1c903 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a9d4bfafe2ee2b10c7451875462462bdbc63aaee25e1868c3faa4756fb5ebfc5 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-f8e1c90 [2021-11-09 09:51:15,574 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-09 09:51:15,577 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-09 09:51:15,639 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-09 09:51:15,640 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-09 09:51:15,642 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-09 09:51:15,647 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-09 09:51:15,652 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-09 09:51:15,655 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-09 09:51:15,663 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-09 09:51:15,665 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-09 09:51:15,666 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-09 09:51:15,667 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-09 09:51:15,668 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-09 09:51:15,670 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-09 09:51:15,672 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-09 09:51:15,673 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-09 09:51:15,678 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-09 09:51:15,681 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-09 09:51:15,692 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-09 09:51:15,696 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-09 09:51:15,698 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-09 09:51:15,704 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-09 09:51:15,706 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-09 09:51:15,710 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-09 09:51:15,710 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-09 09:51:15,711 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-09 09:51:15,713 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-09 09:51:15,713 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-09 09:51:15,715 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-09 09:51:15,715 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-09 09:51:15,717 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-09 09:51:15,719 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-09 09:51:15,720 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-09 09:51:15,722 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-09 09:51:15,722 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-09 09:51:15,723 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-09 09:51:15,723 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-09 09:51:15,723 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-09 09:51:15,724 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-09 09:51:15,725 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-09 09:51:15,726 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-09 09:51:15,784 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-09 09:51:15,786 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-09 09:51:15,787 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-09 09:51:15,788 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-09 09:51:15,789 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-09 09:51:15,790 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-09 09:51:15,790 INFO L138 SettingsManager]: * Use SBE=true [2021-11-09 09:51:15,790 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-09 09:51:15,791 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-09 09:51:15,791 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-09 09:51:15,792 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-09 09:51:15,792 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-09 09:51:15,793 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-09 09:51:15,793 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-09 09:51:15,793 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-09 09:51:15,794 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-09 09:51:15,794 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-09 09:51:15,794 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-09 09:51:15,794 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-09 09:51:15,795 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-09 09:51:15,795 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-09 09:51:15,795 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-09 09:51:15,795 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-09 09:51:15,795 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-09 09:51:15,796 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-09 09:51:15,796 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-09 09:51:15,798 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-09 09:51:15,799 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-09 09:51:15,799 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-09 09:51:15,799 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-09 09:51:15,800 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-09 09:51:15,800 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-09 09:51:15,801 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-09 09:51:15,801 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a9d4bfafe2ee2b10c7451875462462bdbc63aaee25e1868c3faa4756fb5ebfc5 [2021-11-09 09:51:16,079 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-09 09:51:16,102 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-09 09:51:16,105 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-09 09:51:16,107 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-09 09:51:16,108 INFO L275 PluginConnector]: CDTParser initialized [2021-11-09 09:51:16,109 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/../../sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c [2021-11-09 09:51:16,195 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/data/ef84efef2/08e5abb496184fbfa0b248226a6613a4/FLAG9450a60df [2021-11-09 09:51:16,839 INFO L306 CDTParser]: Found 1 translation units. [2021-11-09 09:51:16,841 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c [2021-11-09 09:51:16,874 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/data/ef84efef2/08e5abb496184fbfa0b248226a6613a4/FLAG9450a60df [2021-11-09 09:51:17,052 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/data/ef84efef2/08e5abb496184fbfa0b248226a6613a4 [2021-11-09 09:51:17,055 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-09 09:51:17,057 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-09 09:51:17,059 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-09 09:51:17,060 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-09 09:51:17,064 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-09 09:51:17,064 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:17,067 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5128d850 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17, skipping insertion in model container [2021-11-09 09:51:17,067 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:17,075 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-09 09:51:17,171 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-09 09:51:17,483 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c[17414,17427] [2021-11-09 09:51:17,724 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:51:17,745 INFO L203 MainTranslator]: Completed pre-run [2021-11-09 09:51:17,793 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/sv-benchmarks/c/product-lines/elevator_spec2_product29.cil.c[17414,17427] [2021-11-09 09:51:17,916 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:51:17,946 INFO L208 MainTranslator]: Completed translation [2021-11-09 09:51:17,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17 WrapperNode [2021-11-09 09:51:17,946 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-09 09:51:17,948 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-09 09:51:17,948 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-09 09:51:17,948 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-09 09:51:17,956 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,004 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,267 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-09 09:51:18,268 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-09 09:51:18,269 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-09 09:51:18,269 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-09 09:51:18,278 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,278 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,321 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,322 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,420 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,567 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,588 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,630 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-09 09:51:18,631 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-09 09:51:18,631 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-09 09:51:18,632 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-09 09:51:18,634 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (1/1) ... [2021-11-09 09:51:18,643 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-09 09:51:18,655 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:51:18,672 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-09 09:51:18,716 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04f3b0fa-c887-45be-bf22-14d838379dde/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-09 09:51:18,761 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-09 09:51:18,762 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-09 09:51:18,762 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-09 09:51:18,762 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-09 09:51:25,396 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-09 09:51:25,396 INFO L299 CfgBuilder]: Removed 821 assume(true) statements. [2021-11-09 09:51:25,404 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:51:25 BoogieIcfgContainer [2021-11-09 09:51:25,405 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-09 09:51:25,406 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-09 09:51:25,406 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-09 09:51:25,409 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-09 09:51:25,411 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:51:25,411 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 09:51:17" (1/3) ... [2021-11-09 09:51:25,412 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@73e96a0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:51:25, skipping insertion in model container [2021-11-09 09:51:25,413 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:51:25,413 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:51:17" (2/3) ... [2021-11-09 09:51:25,413 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@73e96a0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:51:25, skipping insertion in model container [2021-11-09 09:51:25,413 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:51:25,414 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:51:25" (3/3) ... [2021-11-09 09:51:25,416 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product29.cil.c [2021-11-09 09:51:25,476 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-09 09:51:25,476 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-09 09:51:25,476 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-09 09:51:25,476 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-09 09:51:25,476 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-09 09:51:25,477 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-09 09:51:25,477 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-09 09:51:25,477 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-09 09:51:25,567 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3561 states, 3560 states have (on average 1.8904494382022472) internal successors, (6730), 3560 states have internal predecessors, (6730), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:25,705 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1770 [2021-11-09 09:51:25,705 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:25,706 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:25,790 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:25,790 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:25,790 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-09 09:51:25,800 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3561 states, 3560 states have (on average 1.8904494382022472) internal successors, (6730), 3560 states have internal predecessors, (6730), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:25,854 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1770 [2021-11-09 09:51:25,854 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:25,854 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:25,864 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:25,864 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:25,877 INFO L791 eck$LassoCheckResult]: Stem: 2182#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 3476#L-1true havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 2353#L3421true havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1399#L3429true main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1059#L2995true assume 0 != main_~tmp~24; 1344#L2965true ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2604#L3232true havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 162#L3052true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 3556#L3077true bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3431#L409true assume 0 == initPersonOnFloor_~floor; 2482#L410true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 775#L517-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1904#L201true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2314#L213-2true havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 3503#L1681true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 3408#L1000true stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 695#L1017true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1311#L1038true stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 151#L1692true timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 3223#L1829true assume !(0 != timeShift_~tmp___9~2); 3485#L1920true assume !(1 == ~doorState~0); 3272#L1920-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 2142#L1584true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1037#L1605true stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 2806#L1557true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1586#L1204-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 217#L1373-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 2359#L1526-2true stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 2319#L1575true timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 3224#L1928true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 482#L1619true assume !(1 == ~currentHeading~0); 2730#L1629true assume !(0 == ~currentFloorID~0); 864#L1629-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 807#L1635-5true havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 2318#L1000-1true __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 2840#L3277true assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 3472#L3278true assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 966#L1009true __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 3304#L3282true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1316#L3337true cleanup_~i~1 := 0; 2188#L2797-2true [2021-11-09 09:51:25,886 INFO L793 eck$LassoCheckResult]: Loop: 2188#L2797-2true assume !false; 1272#L2798true cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 3309#L2801true assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 3267#L822true cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 321#L2805true assume 1 != cleanup_~tmp___0~7; 1052#L2805-1true havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 173#L138-61true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2596#L165-61true anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1980#L1108true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 2817#L1172true isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 522#L1185true cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 2927#L2817true assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 2052#L1681-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 3357#L1000-2true stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 265#L1017-2true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1495#L1038-2true stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 2280#L1692-1true timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2034#L1829-1true assume !(0 != timeShift_~tmp___9~2); 95#L1920-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2600#L1920-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 3037#L1584-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1078#L1605-2true stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 557#L1557-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 684#L1204-8true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2676#L1373-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 220#L1526-8true stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 556#L1575-2true timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 3429#L1928-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 480#L1619-3true assume !(1 == ~currentHeading~0); 2020#L1629-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41#L1629-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2644#L1635-11true havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 2566#L1000-3true __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 630#L3277-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 2617#L3278-1true assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 2706#L1009-5true __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 635#L3282-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1882#L3337-1true cleanup_~i~1 := 1 + cleanup_~i~1; 2188#L2797-2true [2021-11-09 09:51:25,893 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:25,893 INFO L85 PathProgramCache]: Analyzing trace with hash -791477080, now seen corresponding path program 1 times [2021-11-09 09:51:25,902 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:25,903 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1228889255] [2021-11-09 09:51:25,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:25,905 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:26,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:26,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:26,260 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:26,261 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1228889255] [2021-11-09 09:51:26,261 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1228889255] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:26,262 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:26,262 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:26,263 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [368514430] [2021-11-09 09:51:26,272 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:26,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:26,273 INFO L85 PathProgramCache]: Analyzing trace with hash 1363821208, now seen corresponding path program 1 times [2021-11-09 09:51:26,273 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:26,273 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942225801] [2021-11-09 09:51:26,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:26,274 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:26,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:26,349 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:26,349 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:26,350 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942225801] [2021-11-09 09:51:26,350 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942225801] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:26,350 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:26,350 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:26,351 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29466688] [2021-11-09 09:51:26,352 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:26,353 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:26,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:26,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:26,387 INFO L87 Difference]: Start difference. First operand has 3561 states, 3560 states have (on average 1.8904494382022472) internal successors, (6730), 3560 states have internal predecessors, (6730), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:27,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:27,175 INFO L93 Difference]: Finished difference Result 4846 states and 9053 transitions. [2021-11-09 09:51:27,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-09 09:51:27,177 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4846 states and 9053 transitions. [2021-11-09 09:51:27,239 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2935 [2021-11-09 09:51:27,302 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4846 states to 4790 states and 8988 transitions. [2021-11-09 09:51:27,304 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4790 [2021-11-09 09:51:27,311 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4790 [2021-11-09 09:51:27,312 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4790 states and 8988 transitions. [2021-11-09 09:51:27,326 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:27,327 INFO L681 BuchiCegarLoop]: Abstraction has 4790 states and 8988 transitions. [2021-11-09 09:51:27,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4790 states and 8988 transitions. [2021-11-09 09:51:27,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4790 to 3557. [2021-11-09 09:51:27,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3557 states, 3557 states have (on average 1.888107956142817) internal successors, (6716), 3556 states have internal predecessors, (6716), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:27,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3557 states to 3557 states and 6716 transitions. [2021-11-09 09:51:27,556 INFO L704 BuchiCegarLoop]: Abstraction has 3557 states and 6716 transitions. [2021-11-09 09:51:27,556 INFO L587 BuchiCegarLoop]: Abstraction has 3557 states and 6716 transitions. [2021-11-09 09:51:27,556 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-09 09:51:27,556 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3557 states and 6716 transitions. [2021-11-09 09:51:27,581 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1775 [2021-11-09 09:51:27,582 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:27,582 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:27,586 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:27,587 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:27,587 INFO L791 eck$LassoCheckResult]: Stem: 11525#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 11526#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 11635#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 10795#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 10392#L2995 assume 0 != main_~tmp~24; 10393#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 10739#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 8825#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 8826#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 11975#L409 assume 0 == initPersonOnFloor_~floor; 11710#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8645#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9996#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9875#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 11606#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 11973#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 9864#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 9865#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 8711#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 8800#L1829 assume !(0 != timeShift_~tmp___9~2); 11953#L1920 assume !(1 == ~doorState~0); 11965#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 11491#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 10360#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 10361#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 11005#L1204-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 8955#L1373-2 assume !(0 == ~currentFloorID~0); 8957#L1379-2 assume !(~currentFloorID~0 > 0); 9278#L1394-2 assume ~currentFloorID~0 > 0; 8828#L1396-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 8829#L1397-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 8986#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 11983#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 11982#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9485#L1619 assume !(1 == ~currentHeading~0); 9486#L1629 assume !(0 == ~currentFloorID~0); 10122#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8864#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 10045#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 11608#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 11855#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 10269#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 10270#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 8643#L3337 cleanup_~i~1 := 0; 10708#L2797-2 [2021-11-09 09:51:27,588 INFO L793 eck$LassoCheckResult]: Loop: 10708#L2797-2 assume !false; 10657#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 10658#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 11963#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 9169#L2805 assume 1 != cleanup_~tmp___0~7; 9170#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 8855#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 8544#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 11356#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 9713#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 9566#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 9567#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 11412#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 11414#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 9055#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 8555#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 9980#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 11398#L1829-1 assume !(0 != timeShift_~tmp___9~2); 8664#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 8665#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 11763#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 8653#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 9629#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 9630#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 9846#L1373-8 assume !(0 == ~currentFloorID~0); 9094#L1379-8 assume !(~currentFloorID~0 > 0); 8954#L1394-8 assume ~currentFloorID~0 > 0; 11101#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 10114#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 9775#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 11981#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 11980#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 9482#L1619-3 assume !(1 == ~currentHeading~0); 9483#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8529#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8530#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 11745#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 9755#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 9756#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 11774#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 9762#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 9523#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 10708#L2797-2 [2021-11-09 09:51:27,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:27,589 INFO L85 PathProgramCache]: Analyzing trace with hash 669425311, now seen corresponding path program 1 times [2021-11-09 09:51:27,589 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:27,589 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1557530492] [2021-11-09 09:51:27,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:27,590 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:27,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:27,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:27,697 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:27,698 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1557530492] [2021-11-09 09:51:27,698 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1557530492] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:27,698 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:27,698 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:27,699 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [353666623] [2021-11-09 09:51:27,699 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:27,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:27,700 INFO L85 PathProgramCache]: Analyzing trace with hash 23959183, now seen corresponding path program 1 times [2021-11-09 09:51:27,700 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:27,700 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [996172905] [2021-11-09 09:51:27,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:27,701 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:27,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:27,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:27,772 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:27,772 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [996172905] [2021-11-09 09:51:27,773 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [996172905] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:27,773 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:27,773 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:27,773 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424098838] [2021-11-09 09:51:27,773 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:27,773 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:27,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:27,774 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:27,775 INFO L87 Difference]: Start difference. First operand 3557 states and 6716 transitions. cyclomatic complexity: 3160 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:30,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:30,480 INFO L93 Difference]: Finished difference Result 10149 states and 18765 transitions. [2021-11-09 09:51:30,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-09 09:51:30,482 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10149 states and 18765 transitions. [2021-11-09 09:51:30,571 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6045 [2021-11-09 09:51:30,669 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10149 states to 10149 states and 18765 transitions. [2021-11-09 09:51:30,669 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10149 [2021-11-09 09:51:30,685 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10149 [2021-11-09 09:51:30,686 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10149 states and 18765 transitions. [2021-11-09 09:51:30,707 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:30,708 INFO L681 BuchiCegarLoop]: Abstraction has 10149 states and 18765 transitions. [2021-11-09 09:51:30,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10149 states and 18765 transitions. [2021-11-09 09:51:30,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10149 to 4490. [2021-11-09 09:51:30,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4490 states, 4490 states have (on average 1.8498886414253897) internal successors, (8306), 4489 states have internal predecessors, (8306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:30,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4490 states to 4490 states and 8306 transitions. [2021-11-09 09:51:30,878 INFO L704 BuchiCegarLoop]: Abstraction has 4490 states and 8306 transitions. [2021-11-09 09:51:30,878 INFO L587 BuchiCegarLoop]: Abstraction has 4490 states and 8306 transitions. [2021-11-09 09:51:30,878 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-09 09:51:30,878 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4490 states and 8306 transitions. [2021-11-09 09:51:30,902 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3113 [2021-11-09 09:51:30,903 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:30,903 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:30,909 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:30,909 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:30,910 INFO L791 eck$LassoCheckResult]: Stem: 24892#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 24893#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 24997#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 24231#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 23875#L2995 assume 0 != main_~tmp~24; 23876#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 24185#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 22499#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 22500#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 25326#L409 assume 0 == initPersonOnFloor_~floor; 25060#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22341#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23514#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23412#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 24970#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 25324#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 23402#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 23403#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 22400#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22474#L1829 assume !(0 != timeShift_~tmp___9~2); 25301#L1920 assume !(1 == ~doorState~0); 25312#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 24860#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 23844#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 23845#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 24414#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 23930#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 23931#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 24060#L1214-2 assume !(~currentFloorID~0 < 0); 23297#L1229-2 assume !(~currentFloorID~0 < 0); 23298#L1242-2 assume ~currentFloorID~0 < 1; 24359#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 23286#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22692#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 23630#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 22757#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 26362#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 26361#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 23071#L1619 assume !(1 == ~currentHeading~0); 23072#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 23629#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22698#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 23556#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 24972#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 25205#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 23758#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 23759#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 22337#L3337 cleanup_~i~1 := 0; 24159#L2797-2 [2021-11-09 09:51:30,911 INFO L793 eck$LassoCheckResult]: Loop: 24159#L2797-2 assume !false; 24111#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 24112#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 25310#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 22781#L2805 assume 1 != cleanup_~tmp___0~7; 22782#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 22516#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22266#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 24733#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 23278#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 23142#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 23143#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 24788#L1681-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret33, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 24789#L138-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25437#L165-66 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32; 25335#L1652-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14; 25336#L1664-1 stopRequestedAtCurrentFloor_#t~ret36 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~15 := stopRequestedAtCurrentFloor_#t~ret36;havoc stopRequestedAtCurrentFloor_#t~ret36;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 25380#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 25377#L1829-1 assume !(0 != timeShift_~tmp___9~2); 25376#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 25374#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 25368#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 25366#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 25358#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 25359#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 25510#L1373-8 assume !(0 == ~currentFloorID~0); 22719#L1379-8 assume !(~currentFloorID~0 > 0); 22603#L1394-8 assume ~currentFloorID~0 > 0; 24499#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 23618#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 23619#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 26601#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 26599#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 26598#L1619-3 assume !(1 == ~currentHeading~0); 26597#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22248#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 22249#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 25095#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 23316#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 23317#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 25124#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 23323#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 23105#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 24159#L2797-2 [2021-11-09 09:51:30,911 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:30,912 INFO L85 PathProgramCache]: Analyzing trace with hash 1759592851, now seen corresponding path program 1 times [2021-11-09 09:51:30,912 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:30,912 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1814102927] [2021-11-09 09:51:30,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:30,913 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:30,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:31,037 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:31,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:31,038 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1814102927] [2021-11-09 09:51:31,038 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1814102927] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:31,039 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:31,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:31,039 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737658886] [2021-11-09 09:51:31,039 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:31,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:31,040 INFO L85 PathProgramCache]: Analyzing trace with hash -1944692207, now seen corresponding path program 1 times [2021-11-09 09:51:31,040 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:31,041 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021201132] [2021-11-09 09:51:31,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:31,041 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:31,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:31,096 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:31,097 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:31,097 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021201132] [2021-11-09 09:51:31,097 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021201132] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:31,098 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:31,098 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:51:31,098 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584713930] [2021-11-09 09:51:31,098 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:31,099 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:31,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-09 09:51:31,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-09 09:51:31,100 INFO L87 Difference]: Start difference. First operand 4490 states and 8306 transitions. cyclomatic complexity: 3817 Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:31,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:31,519 INFO L93 Difference]: Finished difference Result 10555 states and 19634 transitions. [2021-11-09 09:51:31,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-09 09:51:31,520 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10555 states and 19634 transitions. [2021-11-09 09:51:31,584 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8258 [2021-11-09 09:51:31,655 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10555 states to 10555 states and 19634 transitions. [2021-11-09 09:51:31,656 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10555 [2021-11-09 09:51:31,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10555 [2021-11-09 09:51:31,672 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10555 states and 19634 transitions. [2021-11-09 09:51:31,691 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:31,691 INFO L681 BuchiCegarLoop]: Abstraction has 10555 states and 19634 transitions. [2021-11-09 09:51:31,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10555 states and 19634 transitions. [2021-11-09 09:51:31,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10555 to 4499. [2021-11-09 09:51:31,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4499 states, 4499 states have (on average 1.8481884863302955) internal successors, (8315), 4498 states have internal predecessors, (8315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:31,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4499 states to 4499 states and 8315 transitions. [2021-11-09 09:51:31,855 INFO L704 BuchiCegarLoop]: Abstraction has 4499 states and 8315 transitions. [2021-11-09 09:51:31,855 INFO L587 BuchiCegarLoop]: Abstraction has 4499 states and 8315 transitions. [2021-11-09 09:51:31,855 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-09 09:51:31,856 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4499 states and 8315 transitions. [2021-11-09 09:51:31,879 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3119 [2021-11-09 09:51:31,879 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:31,879 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:31,884 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:31,885 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:31,885 INFO L791 eck$LassoCheckResult]: Stem: 40000#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 40001#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 40111#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 39331#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 38962#L2995 assume 0 != main_~tmp~24; 38963#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 39285#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 37583#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 37584#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 40449#L409 assume 0 == initPersonOnFloor_~floor; 40173#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 37423#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 38599#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 38497#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 40083#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 40448#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 38488#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 38489#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 37483#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 40465#L1829 assume !(0 != timeShift_~tmp___9~2); 40456#L1920 assume !(1 == ~doorState~0); 40432#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 39965#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 38931#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 38932#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 39514#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 39021#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 39022#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 39155#L1214-2 assume !(~currentFloorID~0 < 0); 38382#L1229-2 assume !(~currentFloorID~0 < 0); 38383#L1242-2 assume ~currentFloorID~0 < 1; 39459#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 38371#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37776#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 38715#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 37841#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 40467#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 40466#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 38157#L1619 assume !(1 == ~currentHeading~0); 38158#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 38714#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37782#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 40866#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 40865#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 40862#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 40857#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 40846#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 39258#L3337 cleanup_~i~1 := 0; 39259#L2797-2 [2021-11-09 09:51:31,886 INFO L793 eck$LassoCheckResult]: Loop: 39259#L2797-2 assume !false; 39209#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 39210#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 40430#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 37865#L2805 assume 1 != cleanup_~tmp___0~7; 37866#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 37599#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37348#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 39837#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 38364#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 38228#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 38229#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 40348#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 40476#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 40735#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 38813#L1021-2 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 37359#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 40648#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 40647#L1829-1 assume !(0 != timeShift_~tmp___9~2); 40634#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 40631#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 40620#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 40619#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 40614#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 40615#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 40616#L1373-8 assume !(0 == ~currentFloorID~0); 37803#L1379-8 assume !(~currentFloorID~0 > 0); 37687#L1394-8 assume ~currentFloorID~0 > 0; 39601#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 38703#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 38704#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 40485#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 40483#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 40482#L1619-3 assume !(1 == ~currentHeading~0); 40481#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 37330#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 37331#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 40207#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 38401#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 38402#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 40235#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 38408#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 38191#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 39259#L2797-2 [2021-11-09 09:51:31,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:31,887 INFO L85 PathProgramCache]: Analyzing trace with hash 1759592851, now seen corresponding path program 2 times [2021-11-09 09:51:31,887 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:31,888 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155673886] [2021-11-09 09:51:31,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:31,888 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:31,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:31,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:31,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:31,952 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155673886] [2021-11-09 09:51:31,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155673886] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:31,953 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:31,953 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:31,953 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907981575] [2021-11-09 09:51:31,954 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:31,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:31,954 INFO L85 PathProgramCache]: Analyzing trace with hash -2143734418, now seen corresponding path program 1 times [2021-11-09 09:51:31,954 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:31,955 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326653127] [2021-11-09 09:51:31,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:31,955 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:31,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:32,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:32,030 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:32,031 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326653127] [2021-11-09 09:51:32,031 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326653127] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:32,031 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:32,031 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:32,032 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1306356542] [2021-11-09 09:51:32,032 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:32,034 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:32,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:32,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:32,035 INFO L87 Difference]: Start difference. First operand 4499 states and 8315 transitions. cyclomatic complexity: 3817 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:33,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:33,684 INFO L93 Difference]: Finished difference Result 11071 states and 20451 transitions. [2021-11-09 09:51:33,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:51:33,685 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11071 states and 20451 transitions. [2021-11-09 09:51:33,744 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7495 [2021-11-09 09:51:33,791 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11071 states to 11045 states and 20425 transitions. [2021-11-09 09:51:33,791 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11045 [2021-11-09 09:51:33,806 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11045 [2021-11-09 09:51:33,806 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11045 states and 20425 transitions. [2021-11-09 09:51:33,821 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:33,821 INFO L681 BuchiCegarLoop]: Abstraction has 11045 states and 20425 transitions. [2021-11-09 09:51:33,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11045 states and 20425 transitions. [2021-11-09 09:51:33,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11045 to 6934. [2021-11-09 09:51:33,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6934 states, 6934 states have (on average 1.8370349004903375) internal successors, (12738), 6933 states have internal predecessors, (12738), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:33,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6934 states to 6934 states and 12738 transitions. [2021-11-09 09:51:33,997 INFO L704 BuchiCegarLoop]: Abstraction has 6934 states and 12738 transitions. [2021-11-09 09:51:33,997 INFO L587 BuchiCegarLoop]: Abstraction has 6934 states and 12738 transitions. [2021-11-09 09:51:33,997 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-09 09:51:33,997 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6934 states and 12738 transitions. [2021-11-09 09:51:34,026 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5554 [2021-11-09 09:51:34,026 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:34,026 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:34,032 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:34,032 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:34,032 INFO L791 eck$LassoCheckResult]: Stem: 55595#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 55596#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 55719#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 54907#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 54538#L2995 assume 0 != main_~tmp~24; 54539#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 54865#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 53160#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 53161#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 56072#L409 assume 0 == initPersonOnFloor_~floor; 55781#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 53003#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54170#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54070#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 55684#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 56068#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 54060#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 54061#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 53064#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 53138#L1829 assume !(0 != timeShift_~tmp___9~2); 56077#L1920 assume !(1 == ~doorState~0); 56054#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 55562#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 54509#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 54510#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 55101#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 54595#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 54596#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 54734#L1214-2 assume !(~currentFloorID~0 < 0); 53955#L1229-2 assume !(~currentFloorID~0 < 0); 53956#L1242-2 assume ~currentFloorID~0 < 1; 55044#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53944#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53353#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 54287#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 53416#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 55687#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 55688#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 53729#L1619 assume !(1 == ~currentHeading~0); 53730#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54286#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53359#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 54215#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 55686#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 55932#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 54421#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 54422#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 57887#L3337 cleanup_~i~1 := 0; 57888#L2797-2 [2021-11-09 09:51:34,033 INFO L793 eck$LassoCheckResult]: Loop: 57888#L2797-2 assume !false; 57971#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 57970#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 57969#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 57968#L2805 assume 1 != cleanup_~tmp___0~7; 57967#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 57966#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 57961#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 57848#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 57839#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 53800#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 53801#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 55965#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 56176#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 56167#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 56163#L1021-2 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 52939#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 56244#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 56242#L1829-1 assume !(0 != timeShift_~tmp___9~2); 56241#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 56240#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 56235#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 56234#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 56233#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 54048#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 54049#L1373-8 assume !(0 == ~currentFloorID~0); 53379#L1379-8 assume ~currentFloorID~0 > 0; 53264#L1380-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53265#L138-92 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53869#L165-92 stopRequestedInDirection__wrappee__empty_#t~ret22 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~0 := stopRequestedInDirection__wrappee__empty_#t~ret22;havoc stopRequestedInDirection__wrappee__empty_#t~ret22; 55286#L1384-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 53269#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 53270#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 53861#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 53726#L1619-3 assume !(1 == ~currentHeading~0); 53727#L1629-9 assume !(0 == ~currentFloorID~0); 52913#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52914#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 57989#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 57986#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 57987#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 57988#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 57978#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 57972#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 57888#L2797-2 [2021-11-09 09:51:34,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:34,034 INFO L85 PathProgramCache]: Analyzing trace with hash 1759592851, now seen corresponding path program 3 times [2021-11-09 09:51:34,034 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:34,035 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502399908] [2021-11-09 09:51:34,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:34,035 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:34,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:34,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:34,087 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:34,087 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502399908] [2021-11-09 09:51:34,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502399908] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:34,088 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:34,088 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:34,088 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202297649] [2021-11-09 09:51:34,088 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:34,089 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:34,089 INFO L85 PathProgramCache]: Analyzing trace with hash -1148059233, now seen corresponding path program 1 times [2021-11-09 09:51:34,089 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:34,090 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1777531852] [2021-11-09 09:51:34,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:34,090 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:34,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:34,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:34,139 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:34,139 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1777531852] [2021-11-09 09:51:34,139 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1777531852] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:34,139 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:34,140 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:34,140 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840427151] [2021-11-09 09:51:34,140 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:34,140 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:34,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:34,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:34,142 INFO L87 Difference]: Start difference. First operand 6934 states and 12738 transitions. cyclomatic complexity: 5805 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:35,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:35,187 INFO L93 Difference]: Finished difference Result 19872 states and 36859 transitions. [2021-11-09 09:51:35,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-09 09:51:35,187 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19872 states and 36859 transitions. [2021-11-09 09:51:35,357 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 18211 [2021-11-09 09:51:35,446 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19872 states to 19849 states and 36821 transitions. [2021-11-09 09:51:35,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19849 [2021-11-09 09:51:35,490 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19849 [2021-11-09 09:51:35,490 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19849 states and 36821 transitions. [2021-11-09 09:51:35,511 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:35,511 INFO L681 BuchiCegarLoop]: Abstraction has 19849 states and 36821 transitions. [2021-11-09 09:51:35,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19849 states and 36821 transitions. [2021-11-09 09:51:35,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19849 to 11895. [2021-11-09 09:51:35,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11895 states, 11895 states have (on average 1.840773434216057) internal successors, (21896), 11894 states have internal predecessors, (21896), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:35,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11895 states to 11895 states and 21896 transitions. [2021-11-09 09:51:35,749 INFO L704 BuchiCegarLoop]: Abstraction has 11895 states and 21896 transitions. [2021-11-09 09:51:35,749 INFO L587 BuchiCegarLoop]: Abstraction has 11895 states and 21896 transitions. [2021-11-09 09:51:35,749 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-09 09:51:35,749 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11895 states and 21896 transitions. [2021-11-09 09:51:35,788 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10306 [2021-11-09 09:51:35,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:35,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:35,797 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:35,797 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:35,797 INFO L791 eck$LassoCheckResult]: Stem: 82507#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 82508#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 82639#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 81769#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 81385#L2995 assume 0 != main_~tmp~24; 81386#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 81722#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 79985#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 79986#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 83057#L409 assume 0 == initPersonOnFloor_~floor; 82709#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 79828#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 81010#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 80904#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 82603#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 83054#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 80894#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 80895#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 79888#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 83129#L1829 assume !(0 != timeShift_~tmp___9~2); 83064#L1920 assume !(1 == ~doorState~0); 83028#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 82472#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 81354#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 81355#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 81970#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 81442#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 81443#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 81584#L1214-2 assume !(~currentFloorID~0 < 0); 80789#L1229-2 assume !(~currentFloorID~0 < 0); 80790#L1242-2 assume ~currentFloorID~0 < 1; 81910#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 80778#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 80178#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 81128#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 80241#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 83148#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 83146#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 80562#L1619 assume !(1 == ~currentHeading~0); 80563#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 81860#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 84235#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 84230#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 84223#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 84216#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 83463#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 83444#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 83443#L3337 cleanup_~i~1 := 0; 83441#L2797-2 [2021-11-09 09:51:35,798 INFO L793 eck$LassoCheckResult]: Loop: 83441#L2797-2 assume !false; 83439#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 83438#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 83437#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 83436#L2805 assume 1 != cleanup_~tmp___0~7; 83435#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 83434#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 83429#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 83418#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 83405#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 83403#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 83401#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 83397#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 83395#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 83393#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 83389#L1021-2 assume !(1 == buttonForFloorIsPressed_~floorID); 83387#L1025-2 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 83381#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 83380#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 83377#L1829-1 assume !(0 != timeShift_~tmp___9~2); 83375#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 83373#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 83357#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 83353#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 83348#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 83349#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 83140#L1373-8 assume !(0 == ~currentFloorID~0); 83136#L1379-8 assume !(~currentFloorID~0 > 0); 83133#L1394-8 assume ~currentFloorID~0 > 0; 83134#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 83135#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 81577#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 84219#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 84220#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 80560#L1619-3 assume !(1 == ~currentHeading~0); 80561#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 82366#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 86123#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 86121#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 86119#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 86120#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 86118#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 86110#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 83442#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 83441#L2797-2 [2021-11-09 09:51:35,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:35,799 INFO L85 PathProgramCache]: Analyzing trace with hash -1726027819, now seen corresponding path program 1 times [2021-11-09 09:51:35,799 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:35,799 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925131983] [2021-11-09 09:51:35,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:35,800 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:35,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:35,865 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:35,866 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:35,866 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925131983] [2021-11-09 09:51:35,866 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925131983] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:35,867 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:35,867 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:35,867 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1727383739] [2021-11-09 09:51:35,868 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:35,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:35,868 INFO L85 PathProgramCache]: Analyzing trace with hash -1896442038, now seen corresponding path program 1 times [2021-11-09 09:51:35,869 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:35,869 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223007355] [2021-11-09 09:51:35,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:35,870 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:35,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:35,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:35,953 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:35,957 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223007355] [2021-11-09 09:51:35,958 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223007355] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:35,958 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:35,959 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:35,959 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [202198645] [2021-11-09 09:51:35,960 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:35,961 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:35,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:35,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:35,963 INFO L87 Difference]: Start difference. First operand 11895 states and 21896 transitions. cyclomatic complexity: 10003 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:37,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:37,620 INFO L93 Difference]: Finished difference Result 26055 states and 48032 transitions. [2021-11-09 09:51:37,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:51:37,621 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26055 states and 48032 transitions. [2021-11-09 09:51:37,740 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 22017 [2021-11-09 09:51:37,861 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26055 states to 25962 states and 47921 transitions. [2021-11-09 09:51:37,861 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25962 [2021-11-09 09:51:37,886 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25962 [2021-11-09 09:51:37,887 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25962 states and 47921 transitions. [2021-11-09 09:51:37,911 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:37,911 INFO L681 BuchiCegarLoop]: Abstraction has 25962 states and 47921 transitions. [2021-11-09 09:51:37,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25962 states and 47921 transitions. [2021-11-09 09:51:38,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25962 to 16479. [2021-11-09 09:51:38,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16479 states, 16479 states have (on average 1.8394926876630864) internal successors, (30313), 16478 states have internal predecessors, (30313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:38,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16479 states to 16479 states and 30313 transitions. [2021-11-09 09:51:38,273 INFO L704 BuchiCegarLoop]: Abstraction has 16479 states and 30313 transitions. [2021-11-09 09:51:38,274 INFO L587 BuchiCegarLoop]: Abstraction has 16479 states and 30313 transitions. [2021-11-09 09:51:38,274 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-09 09:51:38,274 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16479 states and 30313 transitions. [2021-11-09 09:51:38,331 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14890 [2021-11-09 09:51:38,331 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:38,332 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:38,342 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:38,342 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:38,342 INFO L791 eck$LassoCheckResult]: Stem: 120444#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 120445#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 120574#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 119712#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 119335#L2995 assume 0 != main_~tmp~24; 119336#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 119666#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 117944#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 117945#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120997#L409 assume 0 == initPersonOnFloor_~floor; 120644#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 117788#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 118966#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 118864#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 120541#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 120994#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 118853#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 118854#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 119634#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 124806#L1829 assume !(0 != timeShift_~tmp___9~2); 121010#L1920 assume !(1 == ~doorState~0); 120967#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 120407#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 119307#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 119308#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 119911#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 119392#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 119393#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 119531#L1214-2 assume !(~currentFloorID~0 < 0); 118747#L1229-2 assume !(~currentFloorID~0 < 0); 118748#L1242-2 assume ~currentFloorID~0 < 1; 119855#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 118736#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 118136#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 119086#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 118198#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 131958#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 126765#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 118519#L1619 assume !(1 == ~currentHeading~0); 118520#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 119809#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 119011#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 119012#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 120543#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 120814#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 119219#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 119220#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 117786#L3337 cleanup_~i~1 := 0; 119638#L2797-2 [2021-11-09 09:51:38,343 INFO L793 eck$LassoCheckResult]: Loop: 119638#L2797-2 assume !false; 124957#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 124956#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 124955#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 124946#L2805 assume 1 != cleanup_~tmp___0~7; 124939#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 124853#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 124837#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 124828#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 124817#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 124810#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 124807#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 124804#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 121151#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 121145#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 121135#L1021-2 assume !(1 == buttonForFloorIsPressed_~floorID); 121125#L1025-2 assume !(2 == buttonForFloorIsPressed_~floorID); 121117#L1029-2 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 121112#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 121104#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 121094#L1829-1 assume !(0 != timeShift_~tmp___9~2); 121091#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 121074#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 121061#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 121052#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 121043#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 121044#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 121051#L1373-8 assume !(0 == ~currentFloorID~0); 121213#L1379-8 assume !(~currentFloorID~0 > 0); 121201#L1394-8 assume ~currentFloorID~0 > 0; 121202#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 121203#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 119524#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 126939#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 126937#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 126934#L1619-3 assume !(1 == ~currentHeading~0); 126935#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 120989#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 125046#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 125044#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 125043#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 125042#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 124982#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 124970#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 124963#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 119638#L2797-2 [2021-11-09 09:51:38,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:38,344 INFO L85 PathProgramCache]: Analyzing trace with hash -1726027819, now seen corresponding path program 2 times [2021-11-09 09:51:38,344 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:38,345 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668262520] [2021-11-09 09:51:38,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:38,345 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:38,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:38,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:38,432 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:38,432 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [668262520] [2021-11-09 09:51:38,432 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [668262520] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:38,432 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:38,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:38,433 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102940768] [2021-11-09 09:51:38,433 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:38,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:38,434 INFO L85 PathProgramCache]: Analyzing trace with hash 200971721, now seen corresponding path program 1 times [2021-11-09 09:51:38,434 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:38,434 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62272897] [2021-11-09 09:51:38,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:38,435 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:38,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:38,500 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:38,500 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:38,501 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62272897] [2021-11-09 09:51:38,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62272897] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:38,501 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:38,501 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:38,501 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633613563] [2021-11-09 09:51:38,502 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:38,502 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:38,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:38,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:38,503 INFO L87 Difference]: Start difference. First operand 16479 states and 30313 transitions. cyclomatic complexity: 13836 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:40,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:40,113 INFO L93 Difference]: Finished difference Result 35141 states and 64711 transitions. [2021-11-09 09:51:40,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:51:40,118 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35141 states and 64711 transitions. [2021-11-09 09:51:40,259 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 31031 [2021-11-09 09:51:40,432 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35141 states to 34976 states and 64519 transitions. [2021-11-09 09:51:40,432 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34976 [2021-11-09 09:51:40,464 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34976 [2021-11-09 09:51:40,464 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34976 states and 64519 transitions. [2021-11-09 09:51:40,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:40,493 INFO L681 BuchiCegarLoop]: Abstraction has 34976 states and 64519 transitions. [2021-11-09 09:51:40,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34976 states and 64519 transitions. [2021-11-09 09:51:41,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34976 to 21243. [2021-11-09 09:51:41,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21243 states, 21243 states have (on average 1.8380172292049146) internal successors, (39045), 21242 states have internal predecessors, (39045), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:41,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21243 states to 21243 states and 39045 transitions. [2021-11-09 09:51:41,227 INFO L704 BuchiCegarLoop]: Abstraction has 21243 states and 39045 transitions. [2021-11-09 09:51:41,227 INFO L587 BuchiCegarLoop]: Abstraction has 21243 states and 39045 transitions. [2021-11-09 09:51:41,228 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-09 09:51:41,228 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21243 states and 39045 transitions. [2021-11-09 09:51:41,298 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 19654 [2021-11-09 09:51:41,298 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:41,298 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:41,316 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:41,316 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:41,317 INFO L791 eck$LassoCheckResult]: Stem: 172070#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 172071#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 172200#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 171352#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 170971#L2995 assume 0 != main_~tmp~24; 170972#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 171304#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 169576#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 169577#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 172615#L409 assume 0 == initPersonOnFloor_~floor; 172267#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 169420#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 170598#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 170496#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 172167#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 172611#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 170486#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 170487#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 171271#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 175325#L1829 assume !(0 != timeShift_~tmp___9~2); 172624#L1920 assume !(1 == ~doorState~0); 172583#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 172033#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 170943#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 170944#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 171551#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 171027#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 171028#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 171167#L1214-2 assume !(~currentFloorID~0 < 0); 170380#L1229-2 assume !(~currentFloorID~0 < 0); 170381#L1242-2 assume ~currentFloorID~0 < 1; 171494#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 170369#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 169769#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 170721#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 169832#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 179508#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 175528#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 170150#L1619 assume !(1 == ~currentHeading~0); 170151#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 171448#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 170644#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 170645#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 172169#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 172441#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 170855#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 170856#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 169418#L3337 cleanup_~i~1 := 0; 171276#L2797-2 [2021-11-09 09:51:41,318 INFO L793 eck$LassoCheckResult]: Loop: 171276#L2797-2 assume !false; 175323#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 175322#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 175321#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 175320#L2805 assume 1 != cleanup_~tmp___0~7; 175311#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 175296#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 175290#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 175284#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 175275#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 175274#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 175273#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 175272#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 172693#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 172689#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 172685#L1021-2 assume !(1 == buttonForFloorIsPressed_~floorID); 172682#L1025-2 assume !(2 == buttonForFloorIsPressed_~floorID); 172679#L1029-2 assume !(3 == buttonForFloorIsPressed_~floorID); 172676#L1033-2 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 172674#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 172673#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 172671#L1829-1 assume !(0 != timeShift_~tmp___9~2); 172670#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 172669#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 172664#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 172663#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 172660#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 172661#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 172662#L1373-8 assume !(0 == ~currentFloorID~0); 172766#L1379-8 assume !(~currentFloorID~0 > 0); 172759#L1394-8 assume ~currentFloorID~0 > 0; 172760#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 172761#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 171371#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 181926#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 181925#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 181924#L1619-3 assume !(1 == ~currentHeading~0); 181923#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 172606#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 175492#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 175490#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 175487#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 175488#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 175489#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 175476#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 175324#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 171276#L2797-2 [2021-11-09 09:51:41,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:41,319 INFO L85 PathProgramCache]: Analyzing trace with hash -1726027819, now seen corresponding path program 3 times [2021-11-09 09:51:41,320 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:41,320 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1072003173] [2021-11-09 09:51:41,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:41,320 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:41,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:41,556 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:41,556 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:41,556 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1072003173] [2021-11-09 09:51:41,557 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1072003173] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:41,557 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:41,557 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:41,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516013664] [2021-11-09 09:51:41,558 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:41,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:41,558 INFO L85 PathProgramCache]: Analyzing trace with hash -477393915, now seen corresponding path program 1 times [2021-11-09 09:51:41,558 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:41,559 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379727207] [2021-11-09 09:51:41,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:41,559 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:41,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:41,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:41,615 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:41,617 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379727207] [2021-11-09 09:51:41,620 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379727207] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:41,625 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:41,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:41,625 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1972356467] [2021-11-09 09:51:41,626 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:41,626 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:41,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:41,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:41,627 INFO L87 Difference]: Start difference. First operand 21243 states and 39045 transitions. cyclomatic complexity: 17804 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:43,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:43,110 INFO L93 Difference]: Finished difference Result 44620 states and 82076 transitions. [2021-11-09 09:51:43,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:51:43,111 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44620 states and 82076 transitions. [2021-11-09 09:51:43,533 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 40420 [2021-11-09 09:51:43,677 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44620 states to 44365 states and 81785 transitions. [2021-11-09 09:51:43,678 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44365 [2021-11-09 09:51:43,717 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44365 [2021-11-09 09:51:43,717 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44365 states and 81785 transitions. [2021-11-09 09:51:43,777 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:43,777 INFO L681 BuchiCegarLoop]: Abstraction has 44365 states and 81785 transitions. [2021-11-09 09:51:43,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44365 states and 81785 transitions. [2021-11-09 09:51:44,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44365 to 26194. [2021-11-09 09:51:44,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26194 states, 26194 states have (on average 1.8362220355806673) internal successors, (48098), 26193 states have internal predecessors, (48098), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:44,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26194 states to 26194 states and 48098 transitions. [2021-11-09 09:51:44,426 INFO L704 BuchiCegarLoop]: Abstraction has 26194 states and 48098 transitions. [2021-11-09 09:51:44,426 INFO L587 BuchiCegarLoop]: Abstraction has 26194 states and 48098 transitions. [2021-11-09 09:51:44,427 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-09 09:51:44,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26194 states and 48098 transitions. [2021-11-09 09:51:44,633 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 24605 [2021-11-09 09:51:44,634 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:44,634 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:44,641 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:44,641 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:44,642 INFO L791 eck$LassoCheckResult]: Stem: 237965#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 237966#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 238098#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 237243#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 236855#L2995 assume 0 != main_~tmp~24; 236856#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 237194#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 235455#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 235456#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 238534#L409 assume 0 == initPersonOnFloor_~floor; 238168#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 235297#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 236478#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236374#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 238064#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 238530#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 236364#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 236365#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 237162#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 238919#L1829 assume !(0 != timeShift_~tmp___9~2); 238543#L1920 assume !(1 == ~doorState~0); 238501#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 237931#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 236824#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 236825#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 237439#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 236915#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 236916#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 237058#L1214-2 assume !(~currentFloorID~0 < 0); 236253#L1229-2 assume !(~currentFloorID~0 < 0); 236254#L1242-2 assume ~currentFloorID~0 < 1; 237380#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 236242#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 235645#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 236597#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 235708#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 241636#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 241635#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 236027#L1619 assume !(1 == ~currentHeading~0); 236028#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 237333#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 241359#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 241358#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 241357#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 241354#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 241349#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 241338#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 241337#L3337 cleanup_~i~1 := 0; 241334#L2797-2 [2021-11-09 09:51:44,642 INFO L793 eck$LassoCheckResult]: Loop: 241334#L2797-2 assume !false; 241331#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 241330#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 241329#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 241328#L2805 assume 1 != cleanup_~tmp___0~7; 241327#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 241326#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 241298#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 241289#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 241274#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 241272#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 241265#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 241263#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 238729#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 238725#L1017-2 assume !(0 == buttonForFloorIsPressed_~floorID); 238719#L1021-2 assume !(1 == buttonForFloorIsPressed_~floorID); 238714#L1025-2 assume !(2 == buttonForFloorIsPressed_~floorID); 238703#L1029-2 assume !(3 == buttonForFloorIsPressed_~floorID); 238689#L1033-2 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~6 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 238684#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 238677#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 238667#L1829-1 assume !(0 != timeShift_~tmp___9~2); 238664#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 238655#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 238629#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 238624#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 238622#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 238616#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 238617#L1373-8 assume !(0 == ~currentFloorID~0); 238660#L1379-8 assume !(~currentFloorID~0 > 0); 238652#L1394-8 assume ~currentFloorID~0 > 0; 238653#L1396-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 238654#L1397-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 237258#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 247164#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 247161#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 247156#L1619-3 assume !(1 == ~currentHeading~0); 247153#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 238524#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 241396#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 241395#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 241394#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 241377#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 241376#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 241366#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 241336#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 241334#L2797-2 [2021-11-09 09:51:44,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:44,643 INFO L85 PathProgramCache]: Analyzing trace with hash -1726027819, now seen corresponding path program 4 times [2021-11-09 09:51:44,643 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:44,644 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174721463] [2021-11-09 09:51:44,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:44,644 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:44,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:44,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:44,727 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:44,729 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174721463] [2021-11-09 09:51:44,729 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174721463] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:44,730 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:44,730 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:44,730 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1399456371] [2021-11-09 09:51:44,730 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:44,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:44,731 INFO L85 PathProgramCache]: Analyzing trace with hash -986867005, now seen corresponding path program 1 times [2021-11-09 09:51:44,731 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:44,731 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [136714561] [2021-11-09 09:51:44,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:44,732 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:44,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:44,765 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:44,766 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:44,766 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [136714561] [2021-11-09 09:51:44,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [136714561] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:44,766 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:44,766 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:44,767 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181874878] [2021-11-09 09:51:44,767 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:44,767 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:44,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:51:44,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:51:44,768 INFO L87 Difference]: Start difference. First operand 26194 states and 48098 transitions. cyclomatic complexity: 21906 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:45,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:45,579 INFO L93 Difference]: Finished difference Result 37746 states and 69528 transitions. [2021-11-09 09:51:45,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:51:45,579 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37746 states and 69528 transitions. [2021-11-09 09:51:45,734 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 35996 [2021-11-09 09:51:45,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37746 states to 37613 states and 69353 transitions. [2021-11-09 09:51:45,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37613 [2021-11-09 09:51:45,994 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37613 [2021-11-09 09:51:45,994 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37613 states and 69353 transitions. [2021-11-09 09:51:46,016 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:46,016 INFO L681 BuchiCegarLoop]: Abstraction has 37613 states and 69353 transitions. [2021-11-09 09:51:46,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37613 states and 69353 transitions. [2021-11-09 09:51:46,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37613 to 29734. [2021-11-09 09:51:46,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29734 states, 29734 states have (on average 1.8353736463307997) internal successors, (54573), 29733 states have internal predecessors, (54573), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:46,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29734 states to 29734 states and 54573 transitions. [2021-11-09 09:51:46,555 INFO L704 BuchiCegarLoop]: Abstraction has 29734 states and 54573 transitions. [2021-11-09 09:51:46,555 INFO L587 BuchiCegarLoop]: Abstraction has 29734 states and 54573 transitions. [2021-11-09 09:51:46,555 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-09 09:51:46,555 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29734 states and 54573 transitions. [2021-11-09 09:51:46,635 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28126 [2021-11-09 09:51:46,635 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:46,635 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:46,642 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:46,643 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:46,643 INFO L791 eck$LassoCheckResult]: Stem: 301882#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 301883#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 302010#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 301162#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 300784#L2995 assume 0 != main_~tmp~24; 300785#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 301115#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 299402#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 299403#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 302413#L409 assume 0 == initPersonOnFloor_~floor; 302078#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 299244#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 300415#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 300313#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 301978#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 302408#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 300304#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 300305#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 301082#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 305399#L1829 assume !(0 != timeShift_~tmp___9~2); 302421#L1920 assume !(1 == ~doorState~0); 302384#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 301845#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 300756#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 300757#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 301356#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 300842#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 300843#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 300982#L1214-2 assume !(~currentFloorID~0 < 0); 300201#L1229-2 assume !(~currentFloorID~0 < 0); 300202#L1242-2 assume ~currentFloorID~0 < 1; 301300#L1244-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 300187#L138-22 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 299592#L165-22 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 300537#L1248-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 299654#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 305608#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 305606#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 299972#L1619 assume !(1 == ~currentHeading~0); 299973#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 301254#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 302746#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 302744#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 302741#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 302737#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 302731#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 302714#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 302702#L3337 cleanup_~i~1 := 0; 302700#L2797-2 [2021-11-09 09:51:46,644 INFO L793 eck$LassoCheckResult]: Loop: 302700#L2797-2 assume !false; 302699#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 302698#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 302697#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 302696#L2805 assume 1 != cleanup_~tmp___0~7; 302695#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 302685#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 302671#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 302663#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 302650#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 302648#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 302646#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 302642#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 302639#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 302635#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 302636#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 313952#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 313950#L1829-1 assume !(0 != timeShift_~tmp___9~2); 313949#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 313948#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 313943#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 313942#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 313940#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 313939#L1204-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 313938#L712-11 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 313936#L1208-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 313937#L1214-8 assume !(~currentFloorID~0 < 0); 315906#L1229-8 assume !(~currentFloorID~0 < 0); 310518#L1242-8 assume ~currentFloorID~0 < 1; 301974#L1244-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 301975#L138-88 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 301939#L165-88 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 301940#L1248-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 300239#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 321442#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 315452#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 299969#L1619-3 assume !(1 == ~currentHeading~0); 299970#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 301747#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 302745#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 302743#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 302740#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 302736#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 302729#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 302708#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 302701#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 302700#L2797-2 [2021-11-09 09:51:46,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:46,645 INFO L85 PathProgramCache]: Analyzing trace with hash -1726027819, now seen corresponding path program 5 times [2021-11-09 09:51:46,645 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:46,645 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817828342] [2021-11-09 09:51:46,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:46,645 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:46,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:46,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:46,694 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:46,694 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817828342] [2021-11-09 09:51:46,694 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817828342] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:46,694 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:46,694 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:46,694 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625463253] [2021-11-09 09:51:46,695 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:46,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:46,695 INFO L85 PathProgramCache]: Analyzing trace with hash -510406267, now seen corresponding path program 1 times [2021-11-09 09:51:46,696 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:46,696 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [304016896] [2021-11-09 09:51:46,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:46,696 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:46,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:46,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:46,736 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:46,737 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [304016896] [2021-11-09 09:51:46,737 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [304016896] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:46,737 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:46,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:46,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1572312027] [2021-11-09 09:51:46,738 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:46,738 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:46,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:46,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:46,739 INFO L87 Difference]: Start difference. First operand 29734 states and 54573 transitions. cyclomatic complexity: 24843 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:48,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:48,471 INFO L93 Difference]: Finished difference Result 56040 states and 102279 transitions. [2021-11-09 09:51:48,471 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-09 09:51:48,471 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56040 states and 102279 transitions. [2021-11-09 09:51:48,825 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 53117 [2021-11-09 09:51:49,084 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56040 states to 56040 states and 102279 transitions. [2021-11-09 09:51:49,085 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56040 [2021-11-09 09:51:49,129 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56040 [2021-11-09 09:51:49,130 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56040 states and 102279 transitions. [2021-11-09 09:51:49,164 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:49,164 INFO L681 BuchiCegarLoop]: Abstraction has 56040 states and 102279 transitions. [2021-11-09 09:51:49,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56040 states and 102279 transitions. [2021-11-09 09:51:49,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56040 to 29734. [2021-11-09 09:51:49,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29734 states, 29734 states have (on average 1.8225936638191969) internal successors, (54193), 29733 states have internal predecessors, (54193), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:49,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29734 states to 29734 states and 54193 transitions. [2021-11-09 09:51:49,818 INFO L704 BuchiCegarLoop]: Abstraction has 29734 states and 54193 transitions. [2021-11-09 09:51:49,818 INFO L587 BuchiCegarLoop]: Abstraction has 29734 states and 54193 transitions. [2021-11-09 09:51:49,818 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-09 09:51:49,818 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29734 states and 54193 transitions. [2021-11-09 09:51:49,904 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28126 [2021-11-09 09:51:49,904 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:49,904 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:49,912 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:49,913 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:49,913 INFO L791 eck$LassoCheckResult]: Stem: 387753#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 387754#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 387885#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 386996#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 386608#L2995 assume 0 != main_~tmp~24; 386609#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 386952#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 385190#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 385191#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 388332#L409 assume 0 == initPersonOnFloor_~floor; 387955#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 385033#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 386220#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 386115#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 387850#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 388328#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 386105#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 386106#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 386915#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 388795#L1829 assume !(0 != timeShift_~tmp___9~2); 388344#L1920 assume !(1 == ~doorState~0); 388292#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 387716#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 386577#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 386578#L1557 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 387199#L1204-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 386666#L712-2 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 386667#L1208-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 386811#L1214-2 assume !(~currentFloorID~0 < 0); 385995#L1229-2 assume !(~currentFloorID~0 < 0); 385996#L1242-2 assume ~currentFloorID~0 < 1; 387140#L1244-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 386342#L1258-2 assume ~currentFloorID~0 < 1; 386827#L1260-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 387280#L1261-2 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 385447#L1526-2 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 388801#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 388799#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 385765#L1619 assume !(1 == ~currentHeading~0); 385766#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 387093#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 389216#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 389214#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 389212#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 389208#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 389201#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 389184#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 389172#L3337 cleanup_~i~1 := 0; 389168#L2797-2 [2021-11-09 09:51:49,914 INFO L793 eck$LassoCheckResult]: Loop: 389168#L2797-2 assume !false; 389161#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 389100#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 388695#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 388690#L2805 assume 1 != cleanup_~tmp___0~7; 388685#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 388684#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 388675#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 388646#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 388629#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 388625#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 388622#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 388616#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 388612#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 388607#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 388608#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 401911#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 401907#L1829-1 assume !(0 != timeShift_~tmp___9~2); 401904#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 401900#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 401888#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 401881#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 401877#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 401869#L1204-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 401862#L712-11 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 401856#L1208-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 387685#L1214-8 assume !(~currentFloorID~0 < 0); 385049#L1229-8 assume !(~currentFloorID~0 < 0); 385050#L1242-8 assume ~currentFloorID~0 < 1; 386989#L1244-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 387849#L1258-8 assume ~currentFloorID~0 < 1; 386237#L1260-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 386238#L1261-8 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 386037#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 408383#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 406869#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 389098#L1619-3 assume !(1 == ~currentHeading~0); 387609#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 387610#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 389215#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 389213#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 389211#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 389206#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 389199#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 389178#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 389171#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 389168#L2797-2 [2021-11-09 09:51:49,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:49,915 INFO L85 PathProgramCache]: Analyzing trace with hash -1521044686, now seen corresponding path program 1 times [2021-11-09 09:51:49,915 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:49,915 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [601004655] [2021-11-09 09:51:49,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:49,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:49,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:49,969 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:49,970 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:49,970 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [601004655] [2021-11-09 09:51:49,970 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [601004655] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:49,970 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:49,971 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:49,971 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1276912519] [2021-11-09 09:51:49,971 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:49,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:49,972 INFO L85 PathProgramCache]: Analyzing trace with hash -305423134, now seen corresponding path program 1 times [2021-11-09 09:51:49,972 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:49,972 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475263832] [2021-11-09 09:51:49,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:49,973 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:49,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:50,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:50,021 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:50,021 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475263832] [2021-11-09 09:51:50,021 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475263832] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:50,022 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:50,022 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:51:50,022 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [253274442] [2021-11-09 09:51:50,022 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:50,023 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:50,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-09 09:51:50,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-09 09:51:50,024 INFO L87 Difference]: Start difference. First operand 29734 states and 54193 transitions. cyclomatic complexity: 24463 Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 6 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:50,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:50,833 INFO L93 Difference]: Finished difference Result 52624 states and 96467 transitions. [2021-11-09 09:51:50,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-09 09:51:50,834 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52624 states and 96467 transitions. [2021-11-09 09:51:51,056 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 50841 [2021-11-09 09:51:51,504 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52624 states to 52624 states and 96467 transitions. [2021-11-09 09:51:51,504 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52624 [2021-11-09 09:51:51,539 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52624 [2021-11-09 09:51:51,539 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52624 states and 96467 transitions. [2021-11-09 09:51:51,564 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:51,564 INFO L681 BuchiCegarLoop]: Abstraction has 52624 states and 96467 transitions. [2021-11-09 09:51:51,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52624 states and 96467 transitions. [2021-11-09 09:51:52,148 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52624 to 30144. [2021-11-09 09:51:52,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30144 states, 30144 states have (on average 1.8099787685774946) internal successors, (54560), 30143 states have internal predecessors, (54560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:52,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30144 states to 30144 states and 54560 transitions. [2021-11-09 09:51:52,238 INFO L704 BuchiCegarLoop]: Abstraction has 30144 states and 54560 transitions. [2021-11-09 09:51:52,238 INFO L587 BuchiCegarLoop]: Abstraction has 30144 states and 54560 transitions. [2021-11-09 09:51:52,238 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-09 09:51:52,238 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30144 states and 54560 transitions. [2021-11-09 09:51:52,328 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28491 [2021-11-09 09:51:52,328 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:52,328 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:52,336 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:52,336 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:52,337 INFO L791 eck$LassoCheckResult]: Stem: 470141#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 470142#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 470284#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 469378#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 468986#L2995 assume 0 != main_~tmp~24; 468987#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 469329#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 467570#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 467571#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 470799#L409 assume 0 == initPersonOnFloor_~floor; 470372#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 467414#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 468595#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 468491#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 470247#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 470794#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 468481#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 468482#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 467475#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 470965#L1829 assume !(0 != timeShift_~tmp___9~2); 470815#L1920 assume !(1 == ~doorState~0); 470751#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 470102#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 468953#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 468954#L1557 assume 0 != stopRequestedInDirection_~overload~0; 468862#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 467996#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 467964#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 467965#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 469223#L1214 assume !(~currentFloorID~0 < 0); 470616#L1229 assume !(~currentFloorID~0 < 0); 470329#L1242 assume ~currentFloorID~0 < 1; 469737#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 469738#L1258 assume ~currentFloorID~0 < 1; 469041#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 469043#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 467267#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 471139#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 471138#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 468147#L1619 assume !(1 == ~currentHeading~0); 468148#L1629 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 469472#L1629-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 468644#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 468645#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 470250#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 470570#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 468856#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 468857#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 467412#L3337 cleanup_~i~1 := 0; 469298#L2797-2 [2021-11-09 09:51:52,337 INFO L793 eck$LassoCheckResult]: Loop: 469298#L2797-2 assume !false; 496388#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 496387#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 471354#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 471353#L2805 assume 1 != cleanup_~tmp___0~7; 471352#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 471344#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 471329#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 471314#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 471299#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 471291#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 471287#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 471281#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 471277#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 471269#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 471270#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 472707#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 472705#L1829-1 assume !(0 != timeShift_~tmp___9~2); 472702#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 472701#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 472696#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 472693#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 471807#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 471808#L1204-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 471788#L712-11 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 471789#L1208-8 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 471782#L1214-8 assume !(~currentFloorID~0 < 0); 471780#L1229-8 assume !(~currentFloorID~0 < 0); 471781#L1242-8 assume ~currentFloorID~0 < 1; 470242#L1244-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 470243#L138-88 assume !(0 == isFloorCalling_~floorID); 470499#L142-88 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 469221#L165-88 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 470207#L1248-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 496199#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 496169#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 496170#L1928-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 496291#L1619-3 assume !(1 == ~currentHeading~0); 496290#L1629-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 496289#L1629-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 496288#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 496405#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 496403#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 496404#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 496402#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 468402#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 468181#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 469298#L2797-2 [2021-11-09 09:51:52,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:52,338 INFO L85 PathProgramCache]: Analyzing trace with hash 19518657, now seen corresponding path program 1 times [2021-11-09 09:51:52,339 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:52,339 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882365137] [2021-11-09 09:51:52,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:52,339 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:52,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:52,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:52,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:52,392 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882365137] [2021-11-09 09:51:52,392 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882365137] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:52,392 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:52,393 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:52,393 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [885463242] [2021-11-09 09:51:52,393 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:52,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:52,394 INFO L85 PathProgramCache]: Analyzing trace with hash 639576150, now seen corresponding path program 1 times [2021-11-09 09:51:52,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:52,394 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820533523] [2021-11-09 09:51:52,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:52,395 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:52,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:52,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:52,437 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:52,437 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820533523] [2021-11-09 09:51:52,437 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820533523] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:52,437 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:52,438 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:52,438 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1384135812] [2021-11-09 09:51:52,438 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:52,438 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:52,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:52,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:52,439 INFO L87 Difference]: Start difference. First operand 30144 states and 54560 transitions. cyclomatic complexity: 24420 Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:53,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:53,489 INFO L93 Difference]: Finished difference Result 59663 states and 109894 transitions. [2021-11-09 09:51:53,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-09 09:51:53,491 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59663 states and 109894 transitions. [2021-11-09 09:51:53,816 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 58156 [2021-11-09 09:51:54,438 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59663 states to 59663 states and 109894 transitions. [2021-11-09 09:51:54,439 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59663 [2021-11-09 09:51:54,479 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59663 [2021-11-09 09:51:54,479 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59663 states and 109894 transitions. [2021-11-09 09:51:54,498 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:54,498 INFO L681 BuchiCegarLoop]: Abstraction has 59663 states and 109894 transitions. [2021-11-09 09:51:54,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59663 states and 109894 transitions. [2021-11-09 09:51:54,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59663 to 29930. [2021-11-09 09:51:54,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29930 states, 29930 states have (on average 1.8103240895422652) internal successors, (54183), 29929 states have internal predecessors, (54183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:54,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29930 states to 29930 states and 54183 transitions. [2021-11-09 09:51:54,844 INFO L704 BuchiCegarLoop]: Abstraction has 29930 states and 54183 transitions. [2021-11-09 09:51:54,844 INFO L587 BuchiCegarLoop]: Abstraction has 29930 states and 54183 transitions. [2021-11-09 09:51:54,844 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-11-09 09:51:54,844 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29930 states and 54183 transitions. [2021-11-09 09:51:54,924 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28480 [2021-11-09 09:51:54,925 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:54,925 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:54,928 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:54,929 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:54,929 INFO L791 eck$LassoCheckResult]: Stem: 559895#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 559896#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 560029#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 559165#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 558782#L2995 assume 0 != main_~tmp~24; 558783#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 559116#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 557397#L3052 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 557398#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 560498#L409 assume 0 == initPersonOnFloor_~floor; 560104#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 557243#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 558409#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 558303#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 559992#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 560497#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 558294#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 558295#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 559084#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 560708#L1829 assume !(0 != timeShift_~tmp___9~2); 560510#L1920 assume !(1 == ~doorState~0); 560461#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 559858#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 558753#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 558754#L1557 assume 0 != stopRequestedInDirection_~overload~0; 558666#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 557816#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 557785#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 557786#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 559012#L1214 assume !(~currentFloorID~0 < 0); 560345#L1229 assume !(~currentFloorID~0 < 0); 560065#L1242 assume ~currentFloorID~0 < 1; 559515#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 559516#L1258 assume ~currentFloorID~0 < 1; 560739#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 560738#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 557094#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 560717#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 560716#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 557964#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 557498#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 557499#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 559257#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 567871#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 567869#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 567868#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 567867#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 567866#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 567828#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 567826#L3337 cleanup_~i~1 := 0; 567823#L2797-2 [2021-11-09 09:51:54,930 INFO L793 eck$LassoCheckResult]: Loop: 567823#L2797-2 assume !false; 567821#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 567819#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 567816#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 567813#L2805 assume 1 != cleanup_~tmp___0~7; 567811#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 567808#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 567802#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 567767#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 567758#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 567757#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 567756#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 567754#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 567753#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 567752#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 560855#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 573792#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 573790#L1829-1 assume !(0 != timeShift_~tmp___9~2); 573758#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 573756#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 573313#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 573309#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 572780#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 572283#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 560219#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 557496#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 557497#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 558095#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 558349#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 558350#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 559581#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 557112#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 560333#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 558681#L1204-11 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 558682#L1373-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 562688#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 580102#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 580101#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 557813#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 567934#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 567933#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 560983#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 559721#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 559722#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 567888#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 567886#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 567884#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 567882#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 567878#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 567860#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 567825#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 567823#L2797-2 [2021-11-09 09:51:54,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:54,931 INFO L85 PathProgramCache]: Analyzing trace with hash 1247883658, now seen corresponding path program 1 times [2021-11-09 09:51:54,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:54,931 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076895434] [2021-11-09 09:51:54,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:54,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:54,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:54,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:54,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:54,978 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076895434] [2021-11-09 09:51:54,978 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076895434] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:54,979 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:54,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:51:54,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486365967] [2021-11-09 09:51:54,979 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:54,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:54,980 INFO L85 PathProgramCache]: Analyzing trace with hash 1088148384, now seen corresponding path program 1 times [2021-11-09 09:51:54,980 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:54,980 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273230413] [2021-11-09 09:51:54,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:54,981 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:54,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:55,024 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:55,024 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:55,025 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273230413] [2021-11-09 09:51:55,025 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273230413] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:55,025 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:55,025 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:55,025 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [723708734] [2021-11-09 09:51:55,026 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:55,026 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:55,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:51:55,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:51:55,027 INFO L87 Difference]: Start difference. First operand 29930 states and 54183 transitions. cyclomatic complexity: 24257 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:55,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:55,179 INFO L93 Difference]: Finished difference Result 29930 states and 54177 transitions. [2021-11-09 09:51:55,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:51:55,180 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29930 states and 54177 transitions. [2021-11-09 09:51:55,868 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28480 [2021-11-09 09:51:55,948 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29930 states to 29930 states and 54177 transitions. [2021-11-09 09:51:55,948 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29930 [2021-11-09 09:51:55,966 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29930 [2021-11-09 09:51:55,966 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29930 states and 54177 transitions. [2021-11-09 09:51:55,980 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:55,981 INFO L681 BuchiCegarLoop]: Abstraction has 29930 states and 54177 transitions. [2021-11-09 09:51:55,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29930 states and 54177 transitions. [2021-11-09 09:51:56,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29930 to 29930. [2021-11-09 09:51:56,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29930 states, 29930 states have (on average 1.810123621784163) internal successors, (54177), 29929 states have internal predecessors, (54177), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:56,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29930 states to 29930 states and 54177 transitions. [2021-11-09 09:51:56,266 INFO L704 BuchiCegarLoop]: Abstraction has 29930 states and 54177 transitions. [2021-11-09 09:51:56,266 INFO L587 BuchiCegarLoop]: Abstraction has 29930 states and 54177 transitions. [2021-11-09 09:51:56,266 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-11-09 09:51:56,266 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29930 states and 54177 transitions. [2021-11-09 09:51:56,346 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28480 [2021-11-09 09:51:56,346 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:51:56,346 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:51:56,350 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:56,350 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:51:56,350 INFO L791 eck$LassoCheckResult]: Stem: 619723#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 619724#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 619852#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 619018#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 618638#L2995 assume 0 != main_~tmp~24; 618639#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 618971#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 617264#L3052 assume !(0 == getOrigin_~person); 617265#L3056 assume !(1 == getOrigin_~person); 617622#L3060 assume !(2 == getOrigin_~person); 618133#L3064 assume !(3 == getOrigin_~person); 618523#L3068 assume !(4 == getOrigin_~person); 618524#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 619155#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 620267#L409 assume 0 == initPersonOnFloor_~floor; 619922#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 617110#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 618270#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 618166#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 619816#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 620265#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 618155#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 618156#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 617169#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 617240#L1829 assume !(0 != timeShift_~tmp___9~2); 620273#L1920 assume !(1 == ~doorState~0); 620242#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 619690#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 618608#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 618609#L1557 assume 0 != stopRequestedInDirection_~overload~0; 618525#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 617680#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 617649#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 617650#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 618869#L1214 assume !(~currentFloorID~0 < 0); 620141#L1229 assume !(~currentFloorID~0 < 0); 619884#L1242 assume ~currentFloorID~0 < 1; 619357#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 619358#L1258 assume ~currentFloorID~0 < 1; 623597#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 623596#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 616963#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 621452#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 621451#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 617828#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 617365#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 617366#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 618389#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 617455#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 624975#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 624974#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 624973#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 618520#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 618521#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 624945#L3337 cleanup_~i~1 := 0; 624942#L2797-2 [2021-11-09 09:51:56,350 INFO L793 eck$LassoCheckResult]: Loop: 624942#L2797-2 assume !false; 624940#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 624938#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 624936#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 624934#L2805 assume 1 != cleanup_~tmp___0~7; 624928#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 624926#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 624457#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 624446#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 624437#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 624436#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 624435#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 624434#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 624428#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 624426#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 620386#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 633956#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 633953#L1829-1 assume !(0 != timeShift_~tmp___9~2); 633951#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 633949#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 626160#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 626157#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 626154#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 626152#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 626150#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 620353#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 626147#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 626145#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 626143#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 626141#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 626138#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 626134#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 626128#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 626125#L1204-11 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 626126#L1373-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 617113#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 617220#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 617675#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 617677#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 628085#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 619876#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 617968#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 617969#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 617748#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 617022#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 625728#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 625723#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 625724#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 625725#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 625701#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 624944#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 624942#L2797-2 [2021-11-09 09:51:56,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:56,351 INFO L85 PathProgramCache]: Analyzing trace with hash -1584990060, now seen corresponding path program 1 times [2021-11-09 09:51:56,351 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:56,351 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [387867417] [2021-11-09 09:51:56,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:56,351 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:56,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:56,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:56,418 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:56,419 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [387867417] [2021-11-09 09:51:56,419 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [387867417] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:56,419 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:56,419 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:51:56,419 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282279085] [2021-11-09 09:51:56,420 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:51:56,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:51:56,420 INFO L85 PathProgramCache]: Analyzing trace with hash 1088148384, now seen corresponding path program 2 times [2021-11-09 09:51:56,420 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:51:56,421 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258322053] [2021-11-09 09:51:56,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:51:56,421 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:51:56,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:51:56,460 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:51:56,460 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:51:56,460 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258322053] [2021-11-09 09:51:56,461 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258322053] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:51:56,461 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:51:56,461 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:51:56,461 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307948327] [2021-11-09 09:51:56,461 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:51:56,462 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:51:56,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:51:56,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:51:56,462 INFO L87 Difference]: Start difference. First operand 29930 states and 54177 transitions. cyclomatic complexity: 24251 Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:57,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:51:57,516 INFO L93 Difference]: Finished difference Result 142967 states and 264608 transitions. [2021-11-09 09:51:57,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-09 09:51:57,516 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142967 states and 264608 transitions. [2021-11-09 09:51:58,561 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 141047 [2021-11-09 09:51:59,028 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142967 states to 142967 states and 264608 transitions. [2021-11-09 09:51:59,028 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142967 [2021-11-09 09:51:59,124 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142967 [2021-11-09 09:51:59,124 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142967 states and 264608 transitions. [2021-11-09 09:51:59,201 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:51:59,201 INFO L681 BuchiCegarLoop]: Abstraction has 142967 states and 264608 transitions. [2021-11-09 09:51:59,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142967 states and 264608 transitions. [2021-11-09 09:51:59,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142967 to 30146. [2021-11-09 09:51:59,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30146 states, 30146 states have (on average 1.8084986399522325) internal successors, (54519), 30145 states have internal predecessors, (54519), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:51:59,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30146 states to 30146 states and 54519 transitions. [2021-11-09 09:51:59,969 INFO L704 BuchiCegarLoop]: Abstraction has 30146 states and 54519 transitions. [2021-11-09 09:51:59,969 INFO L587 BuchiCegarLoop]: Abstraction has 30146 states and 54519 transitions. [2021-11-09 09:51:59,969 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-11-09 09:51:59,969 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30146 states and 54519 transitions. [2021-11-09 09:52:00,559 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28684 [2021-11-09 09:52:00,560 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:00,560 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:00,564 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:00,564 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:00,565 INFO L791 eck$LassoCheckResult]: Stem: 792703#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 792704#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 792835#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 791955#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 791567#L2995 assume 0 != main_~tmp~24; 791568#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 791908#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 790181#L3052 assume !(0 == getOrigin_~person); 790182#L3056 assume !(1 == getOrigin_~person); 790541#L3060 assume !(2 == getOrigin_~person); 791059#L3064 assume !(3 == getOrigin_~person); 791447#L3068 assume !(4 == getOrigin_~person); 791448#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 792106#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 793285#L409 assume 0 == initPersonOnFloor_~floor; 792909#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 790028#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 791193#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 791093#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 792800#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 793283#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 791083#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 791084#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 791875#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 793321#L1829 assume !(0 != timeShift_~tmp___9~2); 793295#L1920 assume !(1 == ~doorState~0); 793254#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 792665#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 791537#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 791538#L1557 assume 0 != stopRequestedInDirection_~overload~0; 791451#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 790598#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 790568#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 790569#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 791802#L1214 assume !(~currentFloorID~0 < 0); 793138#L1229 assume !(~currentFloorID~0 < 0); 792871#L1242 assume ~currentFloorID~0 < 1; 792310#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 792311#L1258 assume ~currentFloorID~0 < 1; 793336#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 793335#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 789883#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 793337#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 793322#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 790748#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 790282#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 790283#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 792049#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 797102#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 797101#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 797100#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 797098#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 797099#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 797065#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 797064#L3337 cleanup_~i~1 := 0; 797062#L2797-2 [2021-11-09 09:52:00,566 INFO L793 eck$LassoCheckResult]: Loop: 797062#L2797-2 assume !false; 797061#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 797060#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 796454#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 796453#L2805 assume 1 != cleanup_~tmp___0~7; 796452#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 796451#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 796442#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 796290#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 796280#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 796277#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 796274#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 796241#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 796242#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 799658#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 796302#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 798622#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 798612#L1829-1 assume !(0 != timeShift_~tmp___9~2); 798609#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 798608#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 798603#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 798602#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 798601#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 795850#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 793019#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 793020#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 805683#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 805675#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 805673#L1702-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~16 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 805672#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 805670#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 805666#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 805664#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 805665#L1204-11 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 805882#L1373-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 799037#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 805620#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 800465#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 800464#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 800463#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 800462#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 790890#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 790891#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 792526#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 798834#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 797103#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 797093#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 797094#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 797095#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 797081#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 797063#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 797062#L2797-2 [2021-11-09 09:52:00,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:00,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1584990060, now seen corresponding path program 2 times [2021-11-09 09:52:00,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:00,567 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070749077] [2021-11-09 09:52:00,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:00,568 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:00,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:00,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:00,630 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:00,631 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070749077] [2021-11-09 09:52:00,631 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070749077] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:00,631 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:00,631 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:52:00,631 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842746877] [2021-11-09 09:52:00,632 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:00,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:00,632 INFO L85 PathProgramCache]: Analyzing trace with hash -717289950, now seen corresponding path program 1 times [2021-11-09 09:52:00,633 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:00,633 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402688884] [2021-11-09 09:52:00,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:00,633 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:00,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:00,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:00,670 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:00,670 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402688884] [2021-11-09 09:52:00,670 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402688884] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:00,671 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:00,671 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:52:00,671 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1507052802] [2021-11-09 09:52:00,671 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:00,671 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:00,672 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:52:00,672 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:52:00,672 INFO L87 Difference]: Start difference. First operand 30146 states and 54519 transitions. cyclomatic complexity: 24377 Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:01,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:01,221 INFO L93 Difference]: Finished difference Result 52725 states and 96674 transitions. [2021-11-09 09:52:01,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:52:01,222 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52725 states and 96674 transitions. [2021-11-09 09:52:01,438 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 51142 [2021-11-09 09:52:01,595 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52725 states to 52725 states and 96674 transitions. [2021-11-09 09:52:01,596 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52725 [2021-11-09 09:52:01,635 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52725 [2021-11-09 09:52:01,635 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52725 states and 96674 transitions. [2021-11-09 09:52:01,663 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:01,663 INFO L681 BuchiCegarLoop]: Abstraction has 52725 states and 96674 transitions. [2021-11-09 09:52:01,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52725 states and 96674 transitions. [2021-11-09 09:52:02,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52725 to 30147. [2021-11-09 09:52:02,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30147 states, 30147 states have (on average 1.808073771851262) internal successors, (54508), 30146 states have internal predecessors, (54508), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:02,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30147 states to 30147 states and 54508 transitions. [2021-11-09 09:52:02,590 INFO L704 BuchiCegarLoop]: Abstraction has 30147 states and 54508 transitions. [2021-11-09 09:52:02,590 INFO L587 BuchiCegarLoop]: Abstraction has 30147 states and 54508 transitions. [2021-11-09 09:52:02,590 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-11-09 09:52:02,590 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30147 states and 54508 transitions. [2021-11-09 09:52:02,667 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:02,667 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:02,667 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:02,670 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:02,670 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:02,671 INFO L791 eck$LassoCheckResult]: Stem: 875602#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 875603#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 875744#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 874860#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 874472#L2995 assume 0 != main_~tmp~24; 874473#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 874812#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 873072#L3052 assume !(0 == getOrigin_~person); 873073#L3056 assume !(1 == getOrigin_~person); 873435#L3060 assume !(2 == getOrigin_~person); 873953#L3064 assume !(3 == getOrigin_~person); 874346#L3068 assume !(4 == getOrigin_~person); 874347#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 875010#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 876235#L409 assume 0 == initPersonOnFloor_~floor; 875822#L410 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 872917#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 874091#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 873986#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 875707#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 876230#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 873976#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 873977#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 874780#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 876430#L1829 assume !(0 != timeShift_~tmp___9~2); 876247#L1920 assume !(1 == ~doorState~0); 876196#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 875564#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 874440#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 874441#L1557 assume 0 != stopRequestedInDirection_~overload~0; 874350#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 873494#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 873462#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 873463#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 874706#L1214 assume !(~currentFloorID~0 < 0); 876068#L1229 assume !(~currentFloorID~0 < 0); 875782#L1242 assume ~currentFloorID~0 < 1; 875215#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 875216#L1258 assume ~currentFloorID~0 < 1; 876480#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 876479#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 872772#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 876439#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 876438#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 873644#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 873173#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 873174#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 874954#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899760#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 899759#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 899758#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 899756#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 899757#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 899737#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 899726#L3337 cleanup_~i~1 := 0; 899724#L2797-2 [2021-11-09 09:52:02,671 INFO L793 eck$LassoCheckResult]: Loop: 899724#L2797-2 assume !false; 899723#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 899722#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 899721#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 899720#L2805 assume 1 != cleanup_~tmp___0~7; 899719#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 899718#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 899713#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 890539#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 890515#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 889173#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 881957#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 881956#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 881924#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 881919#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 877122#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 881464#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 881204#L1829-1 assume !(0 != timeShift_~tmp___9~2); 881167#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 881165#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 881154#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 881152#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 881144#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 881145#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 875936#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 875937#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 873776#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 873777#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 876234#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 897140#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 897141#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 896807#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 896808#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 894878#L1204-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 894877#L712-15 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 878400#L1208-11 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 878399#L1214-11 assume !(~currentFloorID~0 < 0); 878398#L1229-11 assume !(~currentFloorID~0 < 0); 878397#L1242-11 assume ~currentFloorID~0 < 1; 878396#L1244-11 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 878395#L138-118 assume !(0 == isFloorCalling_~floorID); 878393#L142-118 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 878387#L165-118 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 878388#L1248-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 878219#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 878217#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 878197#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 878196#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 878195#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 878193#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 878194#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 875417#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 875418#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899770#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 899768#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 899765#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 899766#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 899767#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 899731#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 899725#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 899724#L2797-2 [2021-11-09 09:52:02,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:02,673 INFO L85 PathProgramCache]: Analyzing trace with hash -1584990060, now seen corresponding path program 3 times [2021-11-09 09:52:02,673 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:02,673 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637574891] [2021-11-09 09:52:02,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:02,673 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:02,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:02,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:02,735 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:02,735 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637574891] [2021-11-09 09:52:02,735 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637574891] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:02,735 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:02,736 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:52:02,736 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [655845449] [2021-11-09 09:52:02,736 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:02,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:02,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1070867526, now seen corresponding path program 1 times [2021-11-09 09:52:02,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:02,737 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1450050386] [2021-11-09 09:52:02,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:02,737 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:02,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:02,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:02,820 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:02,820 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1450050386] [2021-11-09 09:52:02,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1450050386] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:02,821 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:02,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-09 09:52:02,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695670622] [2021-11-09 09:52:02,821 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:02,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:02,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-09 09:52:02,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-09 09:52:02,822 INFO L87 Difference]: Start difference. First operand 30147 states and 54508 transitions. cyclomatic complexity: 24365 Second operand has 6 states, 6 states have (on average 9.166666666666666) internal successors, (55), 6 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:02,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:02,991 INFO L93 Difference]: Finished difference Result 30141 states and 54495 transitions. [2021-11-09 09:52:02,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-09 09:52:02,991 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30141 states and 54495 transitions. [2021-11-09 09:52:03,119 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:03,208 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30141 states to 30141 states and 54495 transitions. [2021-11-09 09:52:03,209 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30141 [2021-11-09 09:52:03,231 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30141 [2021-11-09 09:52:03,231 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30141 states and 54495 transitions. [2021-11-09 09:52:03,247 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:03,247 INFO L681 BuchiCegarLoop]: Abstraction has 30141 states and 54495 transitions. [2021-11-09 09:52:03,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30141 states and 54495 transitions. [2021-11-09 09:52:03,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30141 to 30141. [2021-11-09 09:52:03,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30141 states, 30141 states have (on average 1.808002388772768) internal successors, (54495), 30140 states have internal predecessors, (54495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:03,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30141 states to 30141 states and 54495 transitions. [2021-11-09 09:52:03,565 INFO L704 BuchiCegarLoop]: Abstraction has 30141 states and 54495 transitions. [2021-11-09 09:52:03,565 INFO L587 BuchiCegarLoop]: Abstraction has 30141 states and 54495 transitions. [2021-11-09 09:52:03,565 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-11-09 09:52:03,566 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30141 states and 54495 transitions. [2021-11-09 09:52:03,651 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:03,651 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:03,652 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:03,655 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:03,655 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:03,655 INFO L791 eck$LassoCheckResult]: Stem: 935855#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 935856#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 935989#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 935149#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 934762#L2995 assume 0 != main_~tmp~24; 934763#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 935100#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 933382#L3052 assume !(0 == getOrigin_~person); 933383#L3056 assume !(1 == getOrigin_~person); 933740#L3060 assume !(2 == getOrigin_~person); 934252#L3064 assume !(3 == getOrigin_~person); 934642#L3068 assume !(4 == getOrigin_~person); 934643#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 935290#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 936400#L409 assume !(0 == initPersonOnFloor_~floor); 933718#L436 assume 1 == initPersonOnFloor_~floor; 933719#L437 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_1~0 := 1; 933628#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 934388#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 934285#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 935958#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 936398#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 934276#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 934277#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 935066#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 938268#L1829 assume !(0 != timeShift_~tmp___9~2); 936407#L1920 assume !(1 == ~doorState~0); 936374#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 935822#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 934729#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 934730#L1557 assume 0 != stopRequestedInDirection_~overload~0; 934644#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 933798#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 933767#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 933768#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 934995#L1214 assume !(~currentFloorID~0 < 0); 936276#L1229 assume !(~currentFloorID~0 < 0); 936024#L1242 assume ~currentFloorID~0 < 1; 935490#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 935491#L1258 assume ~currentFloorID~0 < 1; 938346#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 938345#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 933082#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 938275#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 938274#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 933946#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 933483#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 933484#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 934507#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 933572#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 934433#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 935960#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 936231#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 934639#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 934640#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 935071#L3337 cleanup_~i~1 := 0; 935072#L2797-2 [2021-11-09 09:52:03,656 INFO L793 eck$LassoCheckResult]: Loop: 935072#L2797-2 assume !false; 956740#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 956739#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 956738#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 956737#L2805 assume 1 != cleanup_~tmp___0~7; 952754#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 952755#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 956635#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 952724#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 952717#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 952697#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 952698#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 952691#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 952692#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 956671#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 936533#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 952664#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 952656#L1829-1 assume !(0 != timeShift_~tmp___9~2); 952654#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 952653#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 952648#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 952647#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 934078#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 934079#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 936163#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 936164#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 956684#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 936399#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 934328#L1702-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~16 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 934330#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 956370#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 956365#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 956361#L1557-3 assume 0 != stopRequestedInDirection_~overload~0; 956362#L1558-3 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 956412#L1204-9 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 952562#L712-13 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 952556#L1208-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 952557#L1214-9 assume !(~currentFloorID~0 < 0); 935578#L1229-9 assume !(~currentFloorID~0 < 0); 935579#L1242-9 assume ~currentFloorID~0 < 1; 933777#L1244-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 933778#L1258-9 assume ~currentFloorID~0 < 1; 961640#L1260-9 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 961639#L1261-9 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 934142#L1526-9 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 950498#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 948746#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 934508#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 934509#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 936016#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 934086#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 934087#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 933866#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 933145#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 956757#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 956756#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 956754#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 956752#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 956747#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 956741#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 935072#L2797-2 [2021-11-09 09:52:03,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:03,656 INFO L85 PathProgramCache]: Analyzing trace with hash 1921803574, now seen corresponding path program 1 times [2021-11-09 09:52:03,657 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:03,657 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767942365] [2021-11-09 09:52:03,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:03,657 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:03,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:03,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:03,715 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:03,716 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767942365] [2021-11-09 09:52:03,716 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767942365] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:03,716 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:03,716 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:03,716 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535703602] [2021-11-09 09:52:03,717 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:03,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:03,717 INFO L85 PathProgramCache]: Analyzing trace with hash 1240770337, now seen corresponding path program 1 times [2021-11-09 09:52:03,718 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:03,718 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1447767884] [2021-11-09 09:52:03,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:03,718 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:03,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:03,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:03,776 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:03,776 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1447767884] [2021-11-09 09:52:03,776 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1447767884] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:03,776 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:03,776 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:52:03,777 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2604050] [2021-11-09 09:52:03,777 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:03,777 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:03,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:03,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:03,778 INFO L87 Difference]: Start difference. First operand 30141 states and 54495 transitions. cyclomatic complexity: 24358 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:04,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:04,399 INFO L93 Difference]: Finished difference Result 30141 states and 54491 transitions. [2021-11-09 09:52:04,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:04,399 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30141 states and 54491 transitions. [2021-11-09 09:52:04,570 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:04,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30141 states to 30141 states and 54491 transitions. [2021-11-09 09:52:04,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30141 [2021-11-09 09:52:04,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30141 [2021-11-09 09:52:04,727 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30141 states and 54491 transitions. [2021-11-09 09:52:04,752 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:04,752 INFO L681 BuchiCegarLoop]: Abstraction has 30141 states and 54491 transitions. [2021-11-09 09:52:04,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30141 states and 54491 transitions. [2021-11-09 09:52:05,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30141 to 30141. [2021-11-09 09:52:05,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30141 states, 30141 states have (on average 1.8078696791745463) internal successors, (54491), 30140 states have internal predecessors, (54491), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:05,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30141 states to 30141 states and 54491 transitions. [2021-11-09 09:52:05,149 INFO L704 BuchiCegarLoop]: Abstraction has 30141 states and 54491 transitions. [2021-11-09 09:52:05,150 INFO L587 BuchiCegarLoop]: Abstraction has 30141 states and 54491 transitions. [2021-11-09 09:52:05,150 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-11-09 09:52:05,150 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30141 states and 54491 transitions. [2021-11-09 09:52:05,238 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:05,239 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:05,239 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:05,242 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:05,242 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:05,242 INFO L791 eck$LassoCheckResult]: Stem: 996165#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 996166#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 996292#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 995450#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 995061#L2995 assume 0 != main_~tmp~24; 995062#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 995401#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 993676#L3052 assume !(0 == getOrigin_~person); 993677#L3056 assume !(1 == getOrigin_~person); 994037#L3060 assume !(2 == getOrigin_~person); 994556#L3064 assume !(3 == getOrigin_~person); 994947#L3068 assume !(4 == getOrigin_~person); 994948#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 995594#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 996715#L409 assume !(0 == initPersonOnFloor_~floor); 994015#L436 assume 1 == initPersonOnFloor_~floor; 994016#L437 assume !(0 == initPersonOnFloor_~person); 994670#L440 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 993925#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 994691#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 994587#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 996255#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 996710#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 994578#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 994579#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 995369#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1000267#L1829 assume !(0 != timeShift_~tmp___9~2); 996724#L1920 assume !(1 == ~doorState~0); 996682#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 996131#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 995031#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 995032#L1557 assume 0 != stopRequestedInDirection_~overload~0; 994949#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 994096#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 994064#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 994065#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 995296#L1214 assume !(~currentFloorID~0 < 0); 996578#L1229 assume !(~currentFloorID~0 < 0); 996326#L1242 assume ~currentFloorID~0 < 1; 995794#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 995795#L1258 assume ~currentFloorID~0 < 1; 1000703#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1000702#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 993378#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1000269#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1000268#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 994244#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 993780#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 993781#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 994809#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 993869#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1003253#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1003252#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1003251#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 994944#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 994945#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 993521#L3337 cleanup_~i~1 := 0; 995374#L2797-2 [2021-11-09 09:52:05,243 INFO L793 eck$LassoCheckResult]: Loop: 995374#L2797-2 assume !false; 1002612#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1002605#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1002601#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1002599#L2805 assume 1 != cleanup_~tmp___0~7; 1002596#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1002595#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1002590#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1002577#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1002568#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1002567#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1002565#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1002562#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1002561#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1002560#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 996864#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1003029#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1003027#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1003026#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1003025#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1003020#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1003019#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1003016#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1003014#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1001819#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 996811#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1001813#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1001812#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1001810#L1702-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~16 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1001811#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1001427#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1001423#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1001406#L1557-3 assume 0 != stopRequestedInDirection_~overload~0; 1001407#L1558-3 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1001419#L1204-9 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1001403#L712-13 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1001398#L1208-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1001399#L1214-9 assume !(~currentFloorID~0 < 0); 1001413#L1229-9 assume !(~currentFloorID~0 < 0); 1001412#L1242-9 assume ~currentFloorID~0 < 1; 994074#L1244-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 994076#L1258-9 assume ~currentFloorID~0 < 1; 1001164#L1260-9 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1001163#L1261-9 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1000851#L1526-9 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1000849#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1000846#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1000843#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1000650#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 996320#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 994387#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 994388#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 994164#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 993440#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1004578#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1004575#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1004573#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1004570#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1004561#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1004555#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 995374#L2797-2 [2021-11-09 09:52:05,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:05,243 INFO L85 PathProgramCache]: Analyzing trace with hash 2052666129, now seen corresponding path program 1 times [2021-11-09 09:52:05,243 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:05,243 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974625525] [2021-11-09 09:52:05,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:05,244 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:05,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:05,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:05,303 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:05,303 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974625525] [2021-11-09 09:52:05,303 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [974625525] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:05,304 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:05,304 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:05,304 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [501783194] [2021-11-09 09:52:05,304 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:05,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:05,305 INFO L85 PathProgramCache]: Analyzing trace with hash 1240770337, now seen corresponding path program 2 times [2021-11-09 09:52:05,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:05,306 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116342760] [2021-11-09 09:52:05,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:05,306 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:05,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:05,374 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:05,375 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:05,375 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116342760] [2021-11-09 09:52:05,375 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116342760] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:05,375 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:05,376 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:52:05,376 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1007661726] [2021-11-09 09:52:05,376 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:05,376 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:05,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:05,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:05,377 INFO L87 Difference]: Start difference. First operand 30141 states and 54491 transitions. cyclomatic complexity: 24354 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:05,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:05,620 INFO L93 Difference]: Finished difference Result 30141 states and 54487 transitions. [2021-11-09 09:52:05,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:05,621 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30141 states and 54487 transitions. [2021-11-09 09:52:05,794 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:06,208 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30141 states to 30141 states and 54487 transitions. [2021-11-09 09:52:06,209 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30141 [2021-11-09 09:52:06,232 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30141 [2021-11-09 09:52:06,232 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30141 states and 54487 transitions. [2021-11-09 09:52:06,250 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:06,250 INFO L681 BuchiCegarLoop]: Abstraction has 30141 states and 54487 transitions. [2021-11-09 09:52:06,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30141 states and 54487 transitions. [2021-11-09 09:52:06,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30141 to 30141. [2021-11-09 09:52:06,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30141 states, 30141 states have (on average 1.8077369695763246) internal successors, (54487), 30140 states have internal predecessors, (54487), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:06,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30141 states to 30141 states and 54487 transitions. [2021-11-09 09:52:06,644 INFO L704 BuchiCegarLoop]: Abstraction has 30141 states and 54487 transitions. [2021-11-09 09:52:06,645 INFO L587 BuchiCegarLoop]: Abstraction has 30141 states and 54487 transitions. [2021-11-09 09:52:06,645 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-11-09 09:52:06,645 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30141 states and 54487 transitions. [2021-11-09 09:52:06,746 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:06,746 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:06,746 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:06,751 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:06,751 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:06,752 INFO L791 eck$LassoCheckResult]: Stem: 1056469#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1056470#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1056594#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1055744#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1055360#L2995 assume 0 != main_~tmp~24; 1055361#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1055695#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1053971#L3052 assume !(0 == getOrigin_~person); 1053972#L3056 assume !(1 == getOrigin_~person); 1054332#L3060 assume !(2 == getOrigin_~person); 1054851#L3064 assume !(3 == getOrigin_~person); 1055241#L3068 assume !(4 == getOrigin_~person); 1055242#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1055893#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1057036#L409 assume !(0 == initPersonOnFloor_~floor); 1054310#L436 assume 1 == initPersonOnFloor_~floor; 1054311#L437 assume !(0 == initPersonOnFloor_~person); 1054965#L440 assume !(1 == initPersonOnFloor_~person); 1056057#L443 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_1~0 := 1; 1054220#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1054986#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1054883#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1056560#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1057033#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1054874#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1054875#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1055663#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1061147#L1829 assume !(0 != timeShift_~tmp___9~2); 1057045#L1920 assume !(1 == ~doorState~0); 1057002#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1056435#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1055328#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1055329#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1055243#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1054391#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1054359#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1054360#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1055593#L1214 assume !(~currentFloorID~0 < 0); 1056896#L1229 assume !(~currentFloorID~0 < 0); 1056629#L1242 assume ~currentFloorID~0 < 1; 1056094#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1056095#L1258 assume ~currentFloorID~0 < 1; 1061163#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1061162#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1053674#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1061175#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1061149#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1054542#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1054074#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1054075#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1055104#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1054163#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1062319#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1056844#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1056845#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1057043#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1057007#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1053817#L3337 cleanup_~i~1 := 0; 1055667#L2797-2 [2021-11-09 09:52:06,753 INFO L793 eck$LassoCheckResult]: Loop: 1055667#L2797-2 assume !false; 1065497#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1065496#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1065495#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1065490#L2805 assume 1 != cleanup_~tmp___0~7; 1065489#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1065488#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1065474#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1065418#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1065405#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1065403#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1065401#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1065398#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1065396#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1065362#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1057202#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1071655#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1071653#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1071652#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1071651#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1071635#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1071634#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1071632#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1071633#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1056774#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1056775#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1071509#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1071506#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1071499#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1071497#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1071493#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1071488#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1071485#L1557-3 assume 0 != stopRequestedInDirection_~overload~0; 1071482#L1558-3 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1071481#L1204-9 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1071301#L712-13 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1071293#L1208-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1071294#L1214-9 assume !(~currentFloorID~0 < 0); 1071362#L1229-9 assume !(~currentFloorID~0 < 0); 1071361#L1242-9 assume ~currentFloorID~0 < 1; 1071354#L1244-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1071352#L1258-9 assume ~currentFloorID~0 < 1; 1071349#L1260-9 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1071348#L1261-9 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1053928#L1526-9 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1053929#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1055062#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1055105#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1055106#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1056622#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1054682#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1054683#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1054461#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1053736#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1065515#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1065513#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1065514#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1065512#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1065504#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1065498#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1055667#L2797-2 [2021-11-09 09:52:06,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:06,754 INFO L85 PathProgramCache]: Analyzing trace with hash 532403441, now seen corresponding path program 1 times [2021-11-09 09:52:06,754 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:06,754 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [935867720] [2021-11-09 09:52:06,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:06,755 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:06,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:06,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:06,822 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:06,822 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [935867720] [2021-11-09 09:52:06,822 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [935867720] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:06,822 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:06,823 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:06,823 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [471806954] [2021-11-09 09:52:06,823 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:06,824 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:06,824 INFO L85 PathProgramCache]: Analyzing trace with hash 966010723, now seen corresponding path program 1 times [2021-11-09 09:52:06,824 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:06,824 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119771152] [2021-11-09 09:52:06,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:06,825 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:06,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:06,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:06,928 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:06,929 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119771152] [2021-11-09 09:52:06,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119771152] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:06,929 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:06,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-09 09:52:06,930 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16975848] [2021-11-09 09:52:06,931 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:06,931 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:06,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:06,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:06,932 INFO L87 Difference]: Start difference. First operand 30141 states and 54487 transitions. cyclomatic complexity: 24350 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:07,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:07,208 INFO L93 Difference]: Finished difference Result 30141 states and 54483 transitions. [2021-11-09 09:52:07,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:07,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30141 states and 54483 transitions. [2021-11-09 09:52:07,352 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:07,456 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30141 states to 30141 states and 54483 transitions. [2021-11-09 09:52:07,457 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30141 [2021-11-09 09:52:07,480 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30141 [2021-11-09 09:52:07,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30141 states and 54483 transitions. [2021-11-09 09:52:07,500 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:07,500 INFO L681 BuchiCegarLoop]: Abstraction has 30141 states and 54483 transitions. [2021-11-09 09:52:07,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30141 states and 54483 transitions. [2021-11-09 09:52:07,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30141 to 30141. [2021-11-09 09:52:07,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30141 states, 30141 states have (on average 1.8076042599781028) internal successors, (54483), 30140 states have internal predecessors, (54483), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:08,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30141 states to 30141 states and 54483 transitions. [2021-11-09 09:52:08,399 INFO L704 BuchiCegarLoop]: Abstraction has 30141 states and 54483 transitions. [2021-11-09 09:52:08,400 INFO L587 BuchiCegarLoop]: Abstraction has 30141 states and 54483 transitions. [2021-11-09 09:52:08,400 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-11-09 09:52:08,400 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30141 states and 54483 transitions. [2021-11-09 09:52:08,500 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:08,500 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:08,501 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:08,504 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:08,505 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:08,505 INFO L791 eck$LassoCheckResult]: Stem: 1116744#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1116745#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1116866#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1116030#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1115644#L2995 assume 0 != main_~tmp~24; 1115645#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1115981#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1114268#L3052 assume !(0 == getOrigin_~person); 1114269#L3056 assume !(1 == getOrigin_~person); 1114628#L3060 assume !(2 == getOrigin_~person); 1115142#L3064 assume !(3 == getOrigin_~person); 1115530#L3068 assume !(4 == getOrigin_~person); 1115531#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1116178#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1117273#L409 assume !(0 == initPersonOnFloor_~floor); 1114606#L436 assume !(1 == initPersonOnFloor_~floor); 1114608#L463 assume !(2 == initPersonOnFloor_~floor); 1115268#L490 assume !(3 == initPersonOnFloor_~floor); 1115270#L517 assume !(4 == initPersonOnFloor_~floor); 1114516#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1115277#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1115173#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1116832#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1117269#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1115164#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1115165#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1114174#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1114246#L1829 assume !(0 != timeShift_~tmp___9~2); 1117284#L1920 assume !(1 == ~doorState~0); 1117247#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1116707#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1115615#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1115616#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1115533#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1114686#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1114655#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1114656#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1115878#L1214 assume !(~currentFloorID~0 < 0); 1117147#L1229 assume !(~currentFloorID~0 < 0); 1116898#L1242 assume ~currentFloorID~0 < 1; 1116375#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1116376#L1258 assume ~currentFloorID~0 < 1; 1121789#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1121788#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1113971#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1121806#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1121775#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1114835#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1114369#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1114370#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1115393#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1114460#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1127242#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1127241#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1127240#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1115528#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1115529#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1114114#L3337 cleanup_~i~1 := 0; 1115953#L2797-2 [2021-11-09 09:52:08,506 INFO L793 eck$LassoCheckResult]: Loop: 1115953#L2797-2 assume !false; 1126200#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1126198#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1126192#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1126189#L2805 assume 1 != cleanup_~tmp___0~7; 1126187#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1126184#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1126174#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1123434#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1123425#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1123420#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1123418#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1123415#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1123413#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1123411#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1117449#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1128879#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1128876#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1128873#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1128871#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1126436#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1126435#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1126433#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1126434#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1122328#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1118115#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1122326#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1122325#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1122319#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1122320#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1135317#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1133135#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1126356#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1122092#L1204-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1122087#L712-15 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1122081#L1208-11 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1122076#L1214-11 assume !(~currentFloorID~0 < 0); 1122073#L1229-11 assume !(~currentFloorID~0 < 0); 1122054#L1242-11 assume ~currentFloorID~0 < 1; 1122053#L1244-11 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1122052#L138-118 assume !(0 == isFloorCalling_~floorID); 1122051#L142-118 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1122041#L165-118 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 1121863#L1248-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1121827#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1121820#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1121812#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1121809#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1121804#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1116893#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1114976#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1114977#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1114755#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1114033#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1136221#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1136218#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1136219#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1136220#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1135271#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1133145#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1115953#L2797-2 [2021-11-09 09:52:08,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:08,507 INFO L85 PathProgramCache]: Analyzing trace with hash 1155582065, now seen corresponding path program 1 times [2021-11-09 09:52:08,507 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:08,507 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1050107815] [2021-11-09 09:52:08,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:08,507 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:08,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:08,611 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:08,612 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:08,612 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1050107815] [2021-11-09 09:52:08,612 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1050107815] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:08,612 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:08,612 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:08,612 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1397305833] [2021-11-09 09:52:08,612 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:08,613 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:08,613 INFO L85 PathProgramCache]: Analyzing trace with hash 1070867526, now seen corresponding path program 2 times [2021-11-09 09:52:08,613 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:08,613 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872655327] [2021-11-09 09:52:08,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:08,613 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:08,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:08,691 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:08,691 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:08,692 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872655327] [2021-11-09 09:52:08,692 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872655327] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:08,692 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:08,692 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-09 09:52:08,692 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563125312] [2021-11-09 09:52:08,693 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:08,693 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:08,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:08,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:08,694 INFO L87 Difference]: Start difference. First operand 30141 states and 54483 transitions. cyclomatic complexity: 24346 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:08,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:08,870 INFO L93 Difference]: Finished difference Result 30120 states and 54449 transitions. [2021-11-09 09:52:08,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:08,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30120 states and 54449 transitions. [2021-11-09 09:52:09,001 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:09,091 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30120 states to 30120 states and 54449 transitions. [2021-11-09 09:52:09,091 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30120 [2021-11-09 09:52:09,113 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30120 [2021-11-09 09:52:09,113 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30120 states and 54449 transitions. [2021-11-09 09:52:09,129 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:09,129 INFO L681 BuchiCegarLoop]: Abstraction has 30120 states and 54449 transitions. [2021-11-09 09:52:09,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30120 states and 54449 transitions. [2021-11-09 09:52:09,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30120 to 30120. [2021-11-09 09:52:09,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30120 states, 30120 states have (on average 1.8077357237715803) internal successors, (54449), 30119 states have internal predecessors, (54449), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:09,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30120 states to 30120 states and 54449 transitions. [2021-11-09 09:52:09,427 INFO L704 BuchiCegarLoop]: Abstraction has 30120 states and 54449 transitions. [2021-11-09 09:52:09,427 INFO L587 BuchiCegarLoop]: Abstraction has 30120 states and 54449 transitions. [2021-11-09 09:52:09,427 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-11-09 09:52:09,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30120 states and 54449 transitions. [2021-11-09 09:52:09,517 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:09,517 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:09,517 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:09,520 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:09,521 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:09,521 INFO L791 eck$LassoCheckResult]: Stem: 1176998#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1176999#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1177131#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1176282#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1175908#L2995 assume 0 != main_~tmp~24; 1175909#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1176237#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1174545#L3052 assume !(0 == getOrigin_~person); 1174546#L3056 assume !(1 == getOrigin_~person); 1174903#L3060 assume !(2 == getOrigin_~person); 1175409#L3064 assume !(3 == getOrigin_~person); 1175792#L3068 assume !(4 == getOrigin_~person); 1175793#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1176427#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1177525#L409 assume !(0 == initPersonOnFloor_~floor); 1174882#L436 assume 1 == initPersonOnFloor_~floor; 1174883#L437 assume !(0 == initPersonOnFloor_~person); 1175519#L440 assume !(1 == initPersonOnFloor_~person); 1176590#L443 assume !(2 == initPersonOnFloor_~person); 1177182#L446 assume 3 == initPersonOnFloor_~person;~personOnFloor_3_1~0 := 1; 1175113#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1175537#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1175440#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1177096#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1177523#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1175431#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1175432#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1174450#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1182418#L1829 assume !(0 != timeShift_~tmp___9~2); 1177534#L1920 assume !(1 == ~doorState~0); 1177502#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1176962#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1175878#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1175879#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1175795#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1174960#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1174930#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1174931#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1176135#L1214 assume !(~currentFloorID~0 < 0); 1177404#L1229 assume !(~currentFloorID~0 < 0); 1177163#L1242 assume ~currentFloorID~0 < 1; 1176627#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1176628#L1258 assume ~currentFloorID~0 < 1; 1182438#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1182437#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1174247#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1182445#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1182421#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1175108#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1174646#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1174647#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1175658#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1174737#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1183999#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1183998#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1183996#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1183997#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1183984#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1183983#L3337 cleanup_~i~1 := 0; 1183981#L2797-2 [2021-11-09 09:52:09,522 INFO L793 eck$LassoCheckResult]: Loop: 1183981#L2797-2 assume !false; 1183980#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1183979#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1183978#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1183977#L2805 assume 1 != cleanup_~tmp___0~7; 1183976#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1183975#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1183970#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1183950#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1183941#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1183936#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1183933#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1183917#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1183915#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1183913#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1178788#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1183901#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1183898#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1183900#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1196030#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1196023#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1196022#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1196021#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1183818#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1183255#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1177611#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1183313#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1183312#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1183310#L1702-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~16 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1183311#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1183236#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1183230#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1183227#L1557-3 assume 0 != stopRequestedInDirection_~overload~0; 1183225#L1558-3 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1183226#L1204-9 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1195921#L712-13 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1183195#L1208-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1183196#L1214-9 assume !(~currentFloorID~0 < 0); 1183251#L1229-9 assume !(~currentFloorID~0 < 0); 1183249#L1242-9 assume ~currentFloorID~0 < 1; 1183246#L1244-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1183243#L1258-9 assume ~currentFloorID~0 < 1; 1183240#L1260-9 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1183239#L1261-9 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1183198#L1526-9 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1184490#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1184487#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1184485#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1182531#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1182416#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1175249#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1175250#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1175027#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1174309#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1184021#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1184018#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1184019#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1184020#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1184005#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1183982#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1183981#L2797-2 [2021-11-09 09:52:09,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:09,523 INFO L85 PathProgramCache]: Analyzing trace with hash -633134228, now seen corresponding path program 1 times [2021-11-09 09:52:09,523 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:09,523 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [83755150] [2021-11-09 09:52:09,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:09,524 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:09,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:09,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:09,582 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:09,582 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [83755150] [2021-11-09 09:52:09,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [83755150] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:09,582 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:09,582 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:09,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165768997] [2021-11-09 09:52:09,583 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:09,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:09,584 INFO L85 PathProgramCache]: Analyzing trace with hash 1240770337, now seen corresponding path program 3 times [2021-11-09 09:52:09,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:09,584 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97819399] [2021-11-09 09:52:09,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:09,584 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:09,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:09,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:09,644 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:09,644 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97819399] [2021-11-09 09:52:09,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97819399] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:09,645 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:09,645 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:52:09,645 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531447705] [2021-11-09 09:52:09,646 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:09,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:09,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:09,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:09,647 INFO L87 Difference]: Start difference. First operand 30120 states and 54449 transitions. cyclomatic complexity: 24333 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:09,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:09,853 INFO L93 Difference]: Finished difference Result 30120 states and 54448 transitions. [2021-11-09 09:52:09,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:09,854 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30120 states and 54448 transitions. [2021-11-09 09:52:10,426 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:10,504 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30120 states to 30120 states and 54448 transitions. [2021-11-09 09:52:10,504 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30120 [2021-11-09 09:52:10,524 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30120 [2021-11-09 09:52:10,524 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30120 states and 54448 transitions. [2021-11-09 09:52:10,539 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:10,539 INFO L681 BuchiCegarLoop]: Abstraction has 30120 states and 54448 transitions. [2021-11-09 09:52:10,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30120 states and 54448 transitions. [2021-11-09 09:52:10,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30120 to 30120. [2021-11-09 09:52:10,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30120 states, 30120 states have (on average 1.8077025232403718) internal successors, (54448), 30119 states have internal predecessors, (54448), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:10,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30120 states to 30120 states and 54448 transitions. [2021-11-09 09:52:10,842 INFO L704 BuchiCegarLoop]: Abstraction has 30120 states and 54448 transitions. [2021-11-09 09:52:10,842 INFO L587 BuchiCegarLoop]: Abstraction has 30120 states and 54448 transitions. [2021-11-09 09:52:10,842 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-11-09 09:52:10,842 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30120 states and 54448 transitions. [2021-11-09 09:52:10,926 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28680 [2021-11-09 09:52:10,926 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:10,926 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:10,930 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:10,931 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:10,931 INFO L791 eck$LassoCheckResult]: Stem: 1237236#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1237237#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1237358#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1236532#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1236156#L2995 assume 0 != main_~tmp~24; 1236157#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1236485#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1234799#L3052 assume !(0 == getOrigin_~person); 1234800#L3056 assume !(1 == getOrigin_~person); 1235157#L3060 assume !(2 == getOrigin_~person); 1235664#L3064 assume !(3 == getOrigin_~person); 1236039#L3068 assume !(4 == getOrigin_~person); 1236040#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1236671#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1237747#L409 assume !(0 == initPersonOnFloor_~floor); 1235136#L436 assume 1 == initPersonOnFloor_~floor; 1235137#L437 assume !(0 == initPersonOnFloor_~person); 1235772#L440 assume !(1 == initPersonOnFloor_~person); 1236832#L443 assume !(2 == initPersonOnFloor_~person); 1237410#L446 assume !(3 == initPersonOnFloor_~person); 1235364#L449 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 1235365#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1235790#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1235695#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1237326#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1237744#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1235686#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1235687#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1236454#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1242451#L1829 assume !(0 != timeShift_~tmp___9~2); 1237751#L1920 assume !(1 == ~doorState~0); 1237726#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1237201#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1236125#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1236126#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1236042#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1235214#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1235184#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1235185#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1236385#L1214 assume !(~currentFloorID~0 < 0); 1237630#L1229 assume !(~currentFloorID~0 < 0); 1237391#L1242 assume ~currentFloorID~0 < 1; 1236869#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1236870#L1258 assume ~currentFloorID~0 < 1; 1242476#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1242475#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1234501#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1242480#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1242460#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1235360#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1234900#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1234901#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1235907#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1234991#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1248856#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1248855#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1248853#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1248854#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1248830#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1248829#L3337 cleanup_~i~1 := 0; 1248827#L2797-2 [2021-11-09 09:52:10,931 INFO L793 eck$LassoCheckResult]: Loop: 1248827#L2797-2 assume !false; 1248826#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1248825#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1248819#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1248813#L2805 assume 1 != cleanup_~tmp___0~7; 1248805#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1248798#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1248793#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1248782#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1248769#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1248767#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1248765#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1248762#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1248760#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1248758#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1239003#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1252882#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1252880#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1252879#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1252878#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1252872#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1252871#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1252868#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1252866#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1252864#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1237827#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1252863#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1252862#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1252860#L1702-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~16 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1252858#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1252854#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1252850#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1252847#L1557-3 assume 0 != stopRequestedInDirection_~overload~0; 1252848#L1558-3 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1255371#L1204-9 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1242786#L712-13 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1242785#L1208-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1242784#L1214-9 assume !(~currentFloorID~0 < 0); 1242783#L1229-9 assume !(~currentFloorID~0 < 0); 1242782#L1242-9 assume ~currentFloorID~0 < 1; 1242781#L1244-9 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1242779#L1258-9 assume ~currentFloorID~0 < 1; 1242774#L1260-9 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1242773#L1261-9 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1242605#L1526-9 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1242523#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1242488#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1242486#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1242482#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1242452#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1235501#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1235502#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1235280#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1234563#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1248869#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1248868#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1248866#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1248864#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1248845#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1248828#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1248827#L2797-2 [2021-11-09 09:52:10,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:10,932 INFO L85 PathProgramCache]: Analyzing trace with hash 607869100, now seen corresponding path program 1 times [2021-11-09 09:52:10,932 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:10,932 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677582253] [2021-11-09 09:52:10,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:10,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:10,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:10,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:10,986 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:10,986 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677582253] [2021-11-09 09:52:10,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677582253] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:10,986 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:10,987 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:10,987 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1443457009] [2021-11-09 09:52:10,987 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:10,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:10,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1240770337, now seen corresponding path program 4 times [2021-11-09 09:52:10,988 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:10,988 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37339956] [2021-11-09 09:52:10,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:10,989 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:11,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:11,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:11,044 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:11,044 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37339956] [2021-11-09 09:52:11,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37339956] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:11,044 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:11,044 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:52:11,045 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449680614] [2021-11-09 09:52:11,045 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:11,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:11,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-09 09:52:11,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-09 09:52:11,046 INFO L87 Difference]: Start difference. First operand 30120 states and 54448 transitions. cyclomatic complexity: 24332 Second operand has 7 states, 7 states have (on average 8.571428571428571) internal successors, (60), 7 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:12,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:12,287 INFO L93 Difference]: Finished difference Result 135040 states and 250276 transitions. [2021-11-09 09:52:12,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-09 09:52:12,287 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135040 states and 250276 transitions. [2021-11-09 09:52:12,848 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 133451 [2021-11-09 09:52:13,252 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135040 states to 135028 states and 250259 transitions. [2021-11-09 09:52:13,252 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135028 [2021-11-09 09:52:13,344 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135028 [2021-11-09 09:52:13,345 INFO L73 IsDeterministic]: Start isDeterministic. Operand 135028 states and 250259 transitions. [2021-11-09 09:52:13,409 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:13,409 INFO L681 BuchiCegarLoop]: Abstraction has 135028 states and 250259 transitions. [2021-11-09 09:52:13,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135028 states and 250259 transitions. [2021-11-09 09:52:14,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135028 to 30108. [2021-11-09 09:52:14,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30108 states, 30108 states have (on average 1.8055666268101502) internal successors, (54362), 30107 states have internal predecessors, (54362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:14,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30108 states to 30108 states and 54362 transitions. [2021-11-09 09:52:14,862 INFO L704 BuchiCegarLoop]: Abstraction has 30108 states and 54362 transitions. [2021-11-09 09:52:14,862 INFO L587 BuchiCegarLoop]: Abstraction has 30108 states and 54362 transitions. [2021-11-09 09:52:14,862 INFO L425 BuchiCegarLoop]: ======== Iteration 23============ [2021-11-09 09:52:14,862 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30108 states and 54362 transitions. [2021-11-09 09:52:14,980 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 28668 [2021-11-09 09:52:14,980 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:14,980 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:14,984 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:14,984 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:14,984 INFO L791 eck$LassoCheckResult]: Stem: 1402505#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1402506#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1402636#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1401763#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1401375#L2995 assume 0 != main_~tmp~24; 1401376#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1401714#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1400000#L3052 assume !(0 == getOrigin_~person); 1400001#L3056 assume !(1 == getOrigin_~person); 1400356#L3060 assume !(2 == getOrigin_~person); 1400871#L3064 assume !(3 == getOrigin_~person); 1401258#L3068 assume !(4 == getOrigin_~person); 1401259#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1401912#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1403075#L409 assume !(0 == initPersonOnFloor_~floor); 1400335#L436 assume 1 == initPersonOnFloor_~floor; 1400336#L437 assume !(0 == initPersonOnFloor_~person); 1400980#L440 assume !(1 == initPersonOnFloor_~person); 1402078#L443 assume !(2 == initPersonOnFloor_~person); 1402687#L446 assume !(3 == initPersonOnFloor_~person); 1400566#L449 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 1400567#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1401001#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1400903#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1402601#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1403072#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1400893#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1400894#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1401682#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1403117#L1829 assume !(0 != timeShift_~tmp___9~2); 1403090#L1920 assume !(1 == ~doorState~0); 1403038#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1402470#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1401344#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1401345#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1401260#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1400414#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1400383#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1400384#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1401609#L1214 assume !(~currentFloorID~0 < 0); 1402924#L1229 assume !(~currentFloorID~0 < 0); 1402667#L1242 assume ~currentFloorID~0 < 1; 1402113#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1402114#L1258 assume ~currentFloorID~0 < 1; 1401432#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1401434#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1399702#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1401655#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1403118#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1400562#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1400100#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1400101#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1401856#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1417129#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1415633#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1415621#L3277 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1415619#L3278 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1415613#L1009 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1415538#L3282 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1415537#L3337 cleanup_~i~1 := 0; 1415535#L2797-2 [2021-11-09 09:52:14,985 INFO L793 eck$LassoCheckResult]: Loop: 1415535#L2797-2 assume !false; 1415534#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1415533#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1404670#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1404669#L2805 assume 1 != cleanup_~tmp___0~7; 1404668#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1404663#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1404657#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1404641#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1404632#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1404629#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1404627#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1404624#L1681-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1404625#L1000-2 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1404630#L1017-2 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1404631#L1038-2 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1407411#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1407407#L1829-1 assume !(0 != timeShift_~tmp___9~2); 1407404#L1920-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1407018#L1920-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1407006#L1584-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1405491#L1605-2 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1405318#L1557-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1405308#L1204-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1405299#L1373-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1403526#L1526-8 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1405288#L1575-2 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1405284#L1928-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1405281#L1702-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1405280#L1707-2 timeShift_#t~ret57 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret57;havoc timeShift_#t~ret57;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1405276#L1584-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1405269#L1605-3 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1405264#L1557-3 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1405265#L1204-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1405271#L712-15 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1405267#L1208-11 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1405262#L1214-11 assume !(~currentFloorID~0 < 0); 1405256#L1229-11 assume !(~currentFloorID~0 < 0); 1405252#L1242-11 assume ~currentFloorID~0 < 1; 1405243#L1244-11 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1405239#L138-118 assume !(0 == isFloorCalling_~floorID); 1405190#L142-118 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1405186#L165-118 stopRequestedInDirection__wrappee__empty_#t~ret18 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___3~1 := stopRequestedInDirection__wrappee__empty_#t~ret18;havoc stopRequestedInDirection__wrappee__empty_#t~ret18; 1405128#L1248-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1405095#L1526-11 stopRequestedInDirection_#t~ret30 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret30;havoc stopRequestedInDirection_#t~ret30;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1405092#L1575-3 timeShift_#t~ret58 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret58;havoc timeShift_#t~ret58; 1405091#L1937-1 assume 0 != timeShift_~tmp___7~2;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~16;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~16; 1405072#L1702-3 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~16 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~16; 1415680#L1707-3 timeShift_#t~ret59 := getReverseHeading_#res;timeShift_~tmp___5~2 := timeShift_#t~ret59;havoc timeShift_#t~ret59;continueInDirection_#in~dir := timeShift_~tmp___5~2;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1415671#L1619-4 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1415669#L712-16 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1415658#L1623-12 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1415655#L1629-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1415642#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1415640#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1415636#L3277-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0; 1415637#L3278-1 assume 0 != ~floorButtons_spc2_0~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1415625#L1009-5 __utac_acc__Specification2_spec__3_#t~ret163 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___4~3 := __utac_acc__Specification2_spec__3_#t~ret163;havoc __utac_acc__Specification2_spec__3_#t~ret163; 1415554#L3282-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3;~floorButtons_spc2_0~0 := 0; 1415536#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1415535#L2797-2 [2021-11-09 09:52:14,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:14,987 INFO L85 PathProgramCache]: Analyzing trace with hash 607869100, now seen corresponding path program 2 times [2021-11-09 09:52:14,987 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:14,987 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233905157] [2021-11-09 09:52:14,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:14,988 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:15,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:15,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:15,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:15,050 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233905157] [2021-11-09 09:52:15,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233905157] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:15,050 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:15,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:15,051 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1022806278] [2021-11-09 09:52:15,051 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:15,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:15,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1070867526, now seen corresponding path program 3 times [2021-11-09 09:52:15,052 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:15,052 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1374504743] [2021-11-09 09:52:15,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:15,053 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:15,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:15,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:15,145 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:15,145 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1374504743] [2021-11-09 09:52:15,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1374504743] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:15,145 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:15,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-09 09:52:15,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [8729034] [2021-11-09 09:52:15,146 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:15,146 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:15,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-09 09:52:15,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-09 09:52:15,148 INFO L87 Difference]: Start difference. First operand 30108 states and 54362 transitions. cyclomatic complexity: 24258 Second operand has 8 states, 8 states have (on average 7.5) internal successors, (60), 8 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:18,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:18,210 INFO L93 Difference]: Finished difference Result 86472 states and 157481 transitions. [2021-11-09 09:52:18,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-09 09:52:18,210 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 86472 states and 157481 transitions. [2021-11-09 09:52:18,558 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 85014 [2021-11-09 09:52:18,779 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 86472 states to 86472 states and 157481 transitions. [2021-11-09 09:52:18,779 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 86472 [2021-11-09 09:52:18,830 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 86472 [2021-11-09 09:52:18,830 INFO L73 IsDeterministic]: Start isDeterministic. Operand 86472 states and 157481 transitions. [2021-11-09 09:52:18,869 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:18,870 INFO L681 BuchiCegarLoop]: Abstraction has 86472 states and 157481 transitions. [2021-11-09 09:52:18,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86472 states and 157481 transitions. [2021-11-09 09:52:19,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86472 to 48214. [2021-11-09 09:52:19,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48214 states, 48214 states have (on average 1.82795453602688) internal successors, (88133), 48213 states have internal predecessors, (88133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:20,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48214 states to 48214 states and 88133 transitions. [2021-11-09 09:52:20,124 INFO L704 BuchiCegarLoop]: Abstraction has 48214 states and 88133 transitions. [2021-11-09 09:52:20,124 INFO L587 BuchiCegarLoop]: Abstraction has 48214 states and 88133 transitions. [2021-11-09 09:52:20,124 INFO L425 BuchiCegarLoop]: ======== Iteration 24============ [2021-11-09 09:52:20,124 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48214 states and 88133 transitions. [2021-11-09 09:52:20,241 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:20,241 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:20,241 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:20,244 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:20,244 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:20,244 INFO L791 eck$LassoCheckResult]: Stem: 1519125#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1519126#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1519260#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1518375#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1517988#L2995 assume 0 != main_~tmp~24; 1517989#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1518327#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1516619#L3052 assume !(0 == getOrigin_~person); 1516620#L3056 assume !(1 == getOrigin_~person); 1516976#L3060 assume !(2 == getOrigin_~person); 1517490#L3064 assume !(3 == getOrigin_~person); 1517872#L3068 assume !(4 == getOrigin_~person); 1517873#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1518525#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1519731#L409 assume !(0 == initPersonOnFloor_~floor); 1516955#L436 assume 1 == initPersonOnFloor_~floor; 1516956#L437 assume !(0 == initPersonOnFloor_~person); 1517601#L440 assume !(1 == initPersonOnFloor_~person); 1518692#L443 assume !(2 == initPersonOnFloor_~person); 1519322#L446 assume !(3 == initPersonOnFloor_~person); 1517185#L449 assume 4 == initPersonOnFloor_~person;~personOnFloor_4_1~0 := 1; 1517186#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1517621#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1517523#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1519225#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1519728#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1517514#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1517515#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1518292#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1519773#L1829 assume !(0 != timeShift_~tmp___9~2); 1519745#L1920 assume !(1 == ~doorState~0); 1519698#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1519090#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1517957#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1517958#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1517874#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1517034#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1517003#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1517004#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1518218#L1214 assume !(~currentFloorID~0 < 0); 1519583#L1229 assume !(~currentFloorID~0 < 0); 1519302#L1242 assume ~currentFloorID~0 < 1; 1518728#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1518729#L1258 assume ~currentFloorID~0 < 1; 1518044#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1518046#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1516321#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1519794#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1519774#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1517181#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1516722#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1516723#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1517740#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1517665#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1517666#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1519536#L3277 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1519537#L3291 assume 1 == __utac_acc__Specification2_spec__3_~floor~0; 1523921#L3293 assume 0 != ~floorButtons_spc2_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1516357#L1009-1 __utac_acc__Specification2_spec__3_#t~ret164 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___3~5 := __utac_acc__Specification2_spec__3_#t~ret164;havoc __utac_acc__Specification2_spec__3_#t~ret164; 1516358#L3297 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5;~floorButtons_spc2_1~0 := 0; 1518297#L3337 cleanup_~i~1 := 0; 1518298#L2797-2 [2021-11-09 09:52:20,245 INFO L793 eck$LassoCheckResult]: Loop: 1518298#L2797-2 assume !false; 1538366#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1538365#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1538364#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1538363#L2805 assume 1 != cleanup_~tmp___0~7; 1538362#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1538357#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1538343#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1538330#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1538321#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1538313#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1538303#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1538299#L1681-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret33, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1538300#L138-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1538301#L165-66 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32; 1538297#L1652-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14; 1538285#L1664-1 stopRequestedAtCurrentFloor_#t~ret36 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~15 := stopRequestedAtCurrentFloor_#t~ret36;havoc stopRequestedAtCurrentFloor_#t~ret36;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1542615#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1542613#L1829-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1538279#L1831-2 assume !(0 != ~persons_0~0); 1542601#L1831-3 assume !(0 != ~persons_1~0); 1542594#L1845-1 assume !(0 != ~persons_2~0); 1542584#L1859-1 assume !(0 != ~persons_3~0); 1542549#L1873-1 assume !(0 != ~persons_4~0); 1542545#L1887-1 assume !(0 != ~persons_5~0); 1542542#L1901-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_#t~ret42, processWaitingOnFloor_#t~ret43, processWaitingOnFloor_#t~ret44, processWaitingOnFloor_#t~ret45, processWaitingOnFloor_#t~ret46, processWaitingOnFloor_#t~ret47, processWaitingOnFloor_#t~ret48, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~4, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~4;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1542540#L229-12 assume 0 == isPersonOnFloor_~floor; 1542539#L230-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1542508#L401-6 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~4 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 1542500#L1730-2 assume !(0 != processWaitingOnFloor_~tmp___0~4); 1542373#L1730-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1542372#L229-14 assume 0 == isPersonOnFloor_~floor; 1542352#L230-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1542333#L401-7 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 1542324#L1743-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 1542323#L1743-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1542321#L229-16 assume 0 == isPersonOnFloor_~floor; 1542290#L230-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1542282#L401-8 processWaitingOnFloor_#t~ret41 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret41;havoc processWaitingOnFloor_#t~ret41; 1542274#L1756-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1541905#L1756-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1541904#L229-18 assume 0 == isPersonOnFloor_~floor; 1541624#L230-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1541598#L401-9 processWaitingOnFloor_#t~ret43 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret43;havoc processWaitingOnFloor_#t~ret43; 1541590#L1769-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1541587#L1769-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1541581#L229-20 assume 0 == isPersonOnFloor_~floor; 1541544#L230-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1541527#L401-10 processWaitingOnFloor_#t~ret45 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret45;havoc processWaitingOnFloor_#t~ret45; 1541525#L1782-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1541523#L1782-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1541522#L229-22 assume 0 == isPersonOnFloor_~floor; 1541511#L230-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1541480#L401-11 processWaitingOnFloor_#t~ret47 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret47;havoc processWaitingOnFloor_#t~ret47; 1541446#L1795-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1541442#L1795-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1541438#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 1541431#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1541414#L971-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1538386#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1538385#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1538384#L3277-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1538383#L3291-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0); 1538375#L3306-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0); 1538371#L3321-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0); 1538368#L3336-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0); 1538367#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1518298#L2797-2 [2021-11-09 09:52:20,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:20,246 INFO L85 PathProgramCache]: Analyzing trace with hash 2138398090, now seen corresponding path program 1 times [2021-11-09 09:52:20,246 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:20,246 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669124279] [2021-11-09 09:52:20,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:20,246 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:20,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:20,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:20,288 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:20,289 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669124279] [2021-11-09 09:52:20,289 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669124279] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:20,289 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:20,289 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:52:20,289 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574603188] [2021-11-09 09:52:20,289 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:20,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:20,290 INFO L85 PathProgramCache]: Analyzing trace with hash 888013357, now seen corresponding path program 1 times [2021-11-09 09:52:20,290 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:20,290 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503980866] [2021-11-09 09:52:20,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:20,291 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:20,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:20,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:20,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:20,318 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503980866] [2021-11-09 09:52:20,319 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503980866] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:20,319 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:20,319 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:52:20,319 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24148788] [2021-11-09 09:52:20,319 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:20,320 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:20,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:52:20,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:52:20,320 INFO L87 Difference]: Start difference. First operand 48214 states and 88133 transitions. cyclomatic complexity: 39924 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:20,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:20,488 INFO L93 Difference]: Finished difference Result 48214 states and 88132 transitions. [2021-11-09 09:52:20,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:52:20,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48214 states and 88132 transitions. [2021-11-09 09:52:20,661 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:20,793 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48214 states to 48214 states and 88132 transitions. [2021-11-09 09:52:20,793 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48214 [2021-11-09 09:52:20,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48214 [2021-11-09 09:52:20,827 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48214 states and 88132 transitions. [2021-11-09 09:52:20,851 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:20,851 INFO L681 BuchiCegarLoop]: Abstraction has 48214 states and 88132 transitions. [2021-11-09 09:52:20,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48214 states and 88132 transitions. [2021-11-09 09:52:21,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48214 to 48214. [2021-11-09 09:52:21,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48214 states, 48214 states have (on average 1.8279337951632306) internal successors, (88132), 48213 states have internal predecessors, (88132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:21,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48214 states to 48214 states and 88132 transitions. [2021-11-09 09:52:21,311 INFO L704 BuchiCegarLoop]: Abstraction has 48214 states and 88132 transitions. [2021-11-09 09:52:21,311 INFO L587 BuchiCegarLoop]: Abstraction has 48214 states and 88132 transitions. [2021-11-09 09:52:21,311 INFO L425 BuchiCegarLoop]: ======== Iteration 25============ [2021-11-09 09:52:21,312 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48214 states and 88132 transitions. [2021-11-09 09:52:21,792 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:21,792 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:21,792 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:21,796 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:21,797 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:21,797 INFO L791 eck$LassoCheckResult]: Stem: 1615525#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1615526#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1615654#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1614815#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1614429#L2995 assume 0 != main_~tmp~24; 1614430#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1614767#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1613062#L3052 assume !(0 == getOrigin_~person); 1613063#L3056 assume !(1 == getOrigin_~person); 1613419#L3060 assume !(2 == getOrigin_~person); 1613928#L3064 assume !(3 == getOrigin_~person); 1614313#L3068 assume !(4 == getOrigin_~person); 1614314#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1614961#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1616061#L409 assume !(0 == initPersonOnFloor_~floor); 1613398#L436 assume 1 == initPersonOnFloor_~floor; 1613399#L437 assume !(0 == initPersonOnFloor_~person); 1614040#L440 assume !(1 == initPersonOnFloor_~person); 1615121#L443 assume !(2 == initPersonOnFloor_~person); 1615705#L446 assume !(3 == initPersonOnFloor_~person); 1613628#L449 assume !(4 == initPersonOnFloor_~person); 1613629#L452 assume !(5 == initPersonOnFloor_~person); 1614059#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1614060#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1613961#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1615619#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1616058#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1613952#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1613953#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1614735#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1616290#L1829 assume !(0 != timeShift_~tmp___9~2); 1616068#L1920 assume !(1 == ~doorState~0); 1616033#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1615493#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1614400#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1614401#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1614315#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1613477#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1613446#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1613447#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1614666#L1214 assume !(~currentFloorID~0 < 0); 1615934#L1229 assume !(~currentFloorID~0 < 0); 1615686#L1242 assume ~currentFloorID~0 < 1; 1615155#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1615156#L1258 assume ~currentFloorID~0 < 1; 1614488#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1614490#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1612761#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1616303#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1616294#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1613624#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1613163#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1613164#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1614179#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1614104#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1614105#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1615622#L3277 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1615186#L3291 assume 1 == __utac_acc__Specification2_spec__3_~floor~0; 1614547#L3293 assume 0 != ~floorButtons_spc2_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1612797#L1009-1 __utac_acc__Specification2_spec__3_#t~ret164 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___3~5 := __utac_acc__Specification2_spec__3_#t~ret164;havoc __utac_acc__Specification2_spec__3_#t~ret164; 1612798#L3297 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5;~floorButtons_spc2_1~0 := 0; 1612905#L3337 cleanup_~i~1 := 0; 1614740#L2797-2 [2021-11-09 09:52:21,797 INFO L793 eck$LassoCheckResult]: Loop: 1614740#L2797-2 assume !false; 1631758#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1631757#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1631756#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1631755#L2805 assume 1 != cleanup_~tmp___0~7; 1631754#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1631753#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1631748#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1631162#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1631150#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1631148#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1631146#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1631143#L1681-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret33, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1631141#L138-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1631134#L165-66 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32; 1631102#L1652-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14; 1631086#L1664-1 stopRequestedAtCurrentFloor_#t~ret36 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~15 := stopRequestedAtCurrentFloor_#t~ret36;havoc stopRequestedAtCurrentFloor_#t~ret36;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1638179#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1638177#L1829-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1631080#L1831-2 assume !(0 != ~persons_0~0); 1638165#L1831-3 assume !(0 != ~persons_1~0); 1638158#L1845-1 assume !(0 != ~persons_2~0); 1638148#L1859-1 assume !(0 != ~persons_3~0); 1638127#L1873-1 assume !(0 != ~persons_4~0); 1632095#L1887-1 assume !(0 != ~persons_5~0); 1632092#L1901-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_#t~ret42, processWaitingOnFloor_#t~ret43, processWaitingOnFloor_#t~ret44, processWaitingOnFloor_#t~ret45, processWaitingOnFloor_#t~ret46, processWaitingOnFloor_#t~ret47, processWaitingOnFloor_#t~ret48, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~4, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~4;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1632084#L229-12 assume 0 == isPersonOnFloor_~floor; 1632082#L230-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1632045#L401-6 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~4 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 1632043#L1730-2 assume !(0 != processWaitingOnFloor_~tmp___0~4); 1632041#L1730-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1632040#L229-14 assume 0 == isPersonOnFloor_~floor; 1632021#L230-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1632004#L401-7 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 1631995#L1743-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 1631994#L1743-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1631993#L229-16 assume 0 == isPersonOnFloor_~floor; 1631964#L230-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1631951#L401-8 processWaitingOnFloor_#t~ret41 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret41;havoc processWaitingOnFloor_#t~ret41; 1631949#L1756-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1631942#L1756-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1631941#L229-18 assume 0 == isPersonOnFloor_~floor; 1631917#L230-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1631886#L401-9 processWaitingOnFloor_#t~ret43 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret43;havoc processWaitingOnFloor_#t~ret43; 1631884#L1769-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1631882#L1769-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1631881#L229-20 assume 0 == isPersonOnFloor_~floor; 1631856#L230-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1631839#L401-10 processWaitingOnFloor_#t~ret45 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret45;havoc processWaitingOnFloor_#t~ret45; 1631837#L1782-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1631835#L1782-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1631833#L229-22 assume 0 == isPersonOnFloor_~floor; 1631832#L230-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1631795#L401-11 processWaitingOnFloor_#t~ret47 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret47;havoc processWaitingOnFloor_#t~ret47; 1631793#L1795-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1631791#L1795-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1631790#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 1631785#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1631784#L971-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1631779#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1631778#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1631777#L3277-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1631776#L3291-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0; 1631775#L3293-1 assume 0 != ~floorButtons_spc2_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1631774#L1009-6 __utac_acc__Specification2_spec__3_#t~ret164 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___3~5 := __utac_acc__Specification2_spec__3_#t~ret164;havoc __utac_acc__Specification2_spec__3_#t~ret164; 1631766#L3297-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5;~floorButtons_spc2_1~0 := 0; 1631759#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1614740#L2797-2 [2021-11-09 09:52:21,798 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:21,798 INFO L85 PathProgramCache]: Analyzing trace with hash 76967889, now seen corresponding path program 1 times [2021-11-09 09:52:21,798 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:21,798 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [692114316] [2021-11-09 09:52:21,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:21,798 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:21,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:21,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:21,851 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:21,852 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [692114316] [2021-11-09 09:52:21,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [692114316] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:21,852 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:21,852 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:52:21,852 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168195625] [2021-11-09 09:52:21,853 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:21,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:21,853 INFO L85 PathProgramCache]: Analyzing trace with hash 872202799, now seen corresponding path program 1 times [2021-11-09 09:52:21,854 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:21,854 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [431553798] [2021-11-09 09:52:21,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:21,854 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:21,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:21,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:21,890 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:21,890 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [431553798] [2021-11-09 09:52:21,890 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [431553798] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:21,891 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:21,891 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:52:21,891 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2044118597] [2021-11-09 09:52:21,891 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:21,892 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:21,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:52:21,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:52:21,892 INFO L87 Difference]: Start difference. First operand 48214 states and 88132 transitions. cyclomatic complexity: 39923 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:22,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:22,141 INFO L93 Difference]: Finished difference Result 48214 states and 88131 transitions. [2021-11-09 09:52:22,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:52:22,142 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48214 states and 88131 transitions. [2021-11-09 09:52:22,386 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:22,549 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48214 states to 48214 states and 88131 transitions. [2021-11-09 09:52:22,549 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48214 [2021-11-09 09:52:22,583 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48214 [2021-11-09 09:52:22,583 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48214 states and 88131 transitions. [2021-11-09 09:52:22,608 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:22,608 INFO L681 BuchiCegarLoop]: Abstraction has 48214 states and 88131 transitions. [2021-11-09 09:52:22,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48214 states and 88131 transitions. [2021-11-09 09:52:22,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48214 to 48214. [2021-11-09 09:52:22,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48214 states, 48214 states have (on average 1.827913054299581) internal successors, (88131), 48213 states have internal predecessors, (88131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:23,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48214 states to 48214 states and 88131 transitions. [2021-11-09 09:52:23,097 INFO L704 BuchiCegarLoop]: Abstraction has 48214 states and 88131 transitions. [2021-11-09 09:52:23,097 INFO L587 BuchiCegarLoop]: Abstraction has 48214 states and 88131 transitions. [2021-11-09 09:52:23,097 INFO L425 BuchiCegarLoop]: ======== Iteration 26============ [2021-11-09 09:52:23,097 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48214 states and 88131 transitions. [2021-11-09 09:52:23,447 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:23,447 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:52:23,447 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:52:23,453 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:23,453 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:52:23,454 INFO L791 eck$LassoCheckResult]: Stem: 1711954#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(10);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string62.base, #t~string62.offset, 1);call write~init~int(95, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(93, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string64.base, #t~string64.offset, 1);call write~init~int(93, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(32, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(97, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(116, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string68.base, #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(10);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string72.base, #t~string72.offset, 1);call write~init~int(112, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string74.base, #t~string74.offset, 1);call write~init~int(111, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(119, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(110, #t~string74.base, 3 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 4 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(73, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(76, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(95, #t~string76.base, 3 + #t~string76.offset, 1);call write~init~int(112, #t~string76.base, 4 + #t~string76.offset, 1);call write~init~int(58, #t~string76.base, 5 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 6 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(37, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 3 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string82.base, #t~string82.offset, 1);call write~init~int(37, #t~string82.base, 1 + #t~string82.offset, 1);call write~init~int(105, #t~string82.base, 2 + #t~string82.offset, 1);call write~init~int(0, #t~string82.base, 3 + #t~string82.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(70, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 5 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string105.base, #t~string105.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string105.base, #t~string105.offset, 1);call write~init~int(0, #t~string105.base, 1 + #t~string105.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(30);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(9);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(21);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(30);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(9);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(25);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1711955#L-1 havoc main_#res;havoc main_#t~ret155, main_~retValue_acc~22, main_~tmp~24;havoc main_~retValue_acc~22;havoc main_~tmp~24; 1712078#L3421 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1711242#L3429 main_#t~ret155 := valid_product_#res;main_~tmp~24 := main_#t~ret155;havoc main_#t~ret155; 1710860#L2995 assume 0 != main_~tmp~24; 1710861#L2965 ~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1711193#L3232 havoc bigMacCall_#t~ret148, bigMacCall_~tmp~21;havoc bigMacCall_~tmp~21;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1709497#L3052 assume !(0 == getOrigin_~person); 1709498#L3056 assume !(1 == getOrigin_~person); 1709855#L3060 assume !(2 == getOrigin_~person); 1710364#L3064 assume !(3 == getOrigin_~person); 1710744#L3068 assume !(4 == getOrigin_~person); 1710745#L3072 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~24 := 1;getOrigin_#res := getOrigin_~retValue_acc~24; 1711387#L3077 bigMacCall_#t~ret148 := getOrigin_#res;bigMacCall_~tmp~21 := bigMacCall_#t~ret148;havoc bigMacCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~21;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1712476#L409 assume !(0 == initPersonOnFloor_~floor); 1709834#L436 assume 1 == initPersonOnFloor_~floor; 1709835#L437 assume !(0 == initPersonOnFloor_~person); 1710474#L440 assume !(1 == initPersonOnFloor_~person); 1711549#L443 assume !(2 == initPersonOnFloor_~person); 1712128#L446 assume !(3 == initPersonOnFloor_~person); 1710063#L449 assume !(4 == initPersonOnFloor_~person); 1710064#L452 assume 5 == initPersonOnFloor_~person;~personOnFloor_5_1~0 := 1; 1710491#L517-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1710492#L201 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1710397#L213-2 havoc cleanup_#t~ret149, cleanup_#t~ret150, cleanup_~i~1, cleanup_~tmp~22, cleanup_~tmp___0~7, cleanup_~__cil_tmp4~3;havoc cleanup_~i~1;havoc cleanup_~tmp~22;havoc cleanup_~tmp___0~7;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1712044#L1681 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1712474#L1000 stopRequestedAtCurrentFloor_#t~ret34 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret34;havoc stopRequestedAtCurrentFloor_#t~ret34;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~9;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~6;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~6; 1710388#L1017 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~6 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~6; 1710389#L1038 stopRequestedAtCurrentFloor_#t~ret35 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~3 := stopRequestedAtCurrentFloor_#t~ret35;havoc stopRequestedAtCurrentFloor_#t~ret35;stopRequestedAtCurrentFloor_~retValue_acc~15 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1709402#L1692 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1712572#L1829 assume !(0 != timeShift_~tmp___9~2); 1712487#L1920 assume !(1 == ~doorState~0); 1712452#L1920-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~12, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~12;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~13;havoc isAnyLiftButtonPressed_~retValue_acc~13; 1711922#L1584 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~13; 1710832#L1605 stopRequestedInDirection_#t~ret27 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret27;havoc stopRequestedInDirection_#t~ret27;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~6; 1710833#L1557 assume 0 != stopRequestedInDirection_~overload~0; 1710747#L1558 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret16, stopRequestedInDirection__wrappee__empty_#t~ret17, stopRequestedInDirection__wrappee__empty_#t~ret18, stopRequestedInDirection__wrappee__empty_#t~ret19, stopRequestedInDirection__wrappee__empty_#t~ret20, stopRequestedInDirection__wrappee__empty_#t~ret21, stopRequestedInDirection__wrappee__empty_#t~ret22, stopRequestedInDirection__wrappee__empty_#t~ret23, stopRequestedInDirection__wrappee__empty_#t~ret24, stopRequestedInDirection__wrappee__empty_#t~ret25, stopRequestedInDirection__wrappee__empty_#t~ret26, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~11, stopRequestedInDirection__wrappee__empty_~tmp~5, stopRequestedInDirection__wrappee__empty_~tmp___0~1, stopRequestedInDirection__wrappee__empty_~tmp___1~1, stopRequestedInDirection__wrappee__empty_~tmp___2~1, stopRequestedInDirection__wrappee__empty_~tmp___3~1, stopRequestedInDirection__wrappee__empty_~tmp___4~0, stopRequestedInDirection__wrappee__empty_~tmp___5~0, stopRequestedInDirection__wrappee__empty_~tmp___6~0, stopRequestedInDirection__wrappee__empty_~tmp___7~0, stopRequestedInDirection__wrappee__empty_~tmp___8~0, stopRequestedInDirection__wrappee__empty_~tmp___9~0;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11;havoc stopRequestedInDirection__wrappee__empty_~tmp~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0; 1709914#L1204 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1709882#L712 stopRequestedInDirection__wrappee__empty_#t~ret16 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~5 := stopRequestedInDirection__wrappee__empty_#t~ret16;havoc stopRequestedInDirection__wrappee__empty_#t~ret16; 1709883#L1208 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~5); 1711091#L1214 assume !(~currentFloorID~0 < 0); 1712350#L1229 assume !(~currentFloorID~0 < 0); 1712109#L1242 assume ~currentFloorID~0 < 1; 1711583#L1244 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 1711584#L1258 assume ~currentFloorID~0 < 1; 1712618#L1260 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 1712617#L1261 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~11; 1709198#L1526 stopRequestedInDirection_#t~ret28 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~12 := stopRequestedInDirection_#t~ret28;havoc stopRequestedInDirection_#t~ret28;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~12; 1711136#L1575 timeShift_#t~ret56 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret56;havoc timeShift_#t~ret56; 1712576#L1928 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1710059#L1619 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 1709598#L712-3 continueInDirection_#t~ret31 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret31;havoc continueInDirection_#t~ret31; 1709599#L1623 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 1710607#L1629-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1709690#L1635-5 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1710537#L1000-1 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1712046#L3277 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1711615#L3291 assume 1 == __utac_acc__Specification2_spec__3_~floor~0; 1710972#L3293 assume 0 != ~floorButtons_spc2_1~0;havoc areDoorsOpen_#res;havoc areDoorsOpen_~retValue_acc~5;havoc areDoorsOpen_~retValue_acc~5;areDoorsOpen_~retValue_acc~5 := ~doorState~0;areDoorsOpen_#res := areDoorsOpen_~retValue_acc~5; 1709234#L1009-1 __utac_acc__Specification2_spec__3_#t~ret164 := areDoorsOpen_#res;__utac_acc__Specification2_spec__3_~tmp___3~5 := __utac_acc__Specification2_spec__3_#t~ret164;havoc __utac_acc__Specification2_spec__3_#t~ret164; 1709235#L3297 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5;~floorButtons_spc2_1~0 := 0; 1709342#L3337 cleanup_~i~1 := 0; 1711166#L2797-2 [2021-11-09 09:52:23,455 INFO L793 eck$LassoCheckResult]: Loop: 1711166#L2797-2 assume !false; 1725538#L2798 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1725537#L2801 assume cleanup_~i~1 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~3;havoc isBlocked_~retValue_acc~3;isBlocked_~retValue_acc~3 := 0;isBlocked_#res := isBlocked_~retValue_acc~3; 1725536#L822 cleanup_#t~ret149 := isBlocked_#res;cleanup_~tmp___0~7 := cleanup_#t~ret149;havoc cleanup_#t~ret149; 1725535#L2805 assume 1 != cleanup_~tmp___0~7; 1725534#L2805-1 havoc isIdle_#res;havoc isIdle_#t~ret15, isIdle_~retValue_acc~10, isIdle_~tmp~4;havoc isIdle_~retValue_acc~10;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_#t~ret12, anyStopRequested_#t~ret13, anyStopRequested_#t~ret14, anyStopRequested_~retValue_acc~9, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~9;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1725529#L138-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1725511#L165-61 anyStopRequested_#t~ret10 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret10;havoc anyStopRequested_#t~ret10; 1725502#L1108 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~9 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~9; 1725489#L1172 isIdle_#t~ret15 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret15;havoc isIdle_#t~ret15;isIdle_~retValue_acc~10 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~10; 1725487#L1185 cleanup_#t~ret150 := isIdle_#res;cleanup_~tmp~22 := cleanup_#t~ret150;havoc cleanup_#t~ret150; 1725485#L2817 assume !(0 != cleanup_~tmp~22);havoc timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_#t~ret57, timeShift_#t~ret58, timeShift_#t~ret59, timeShift_~tmp~11, timeShift_~tmp___0~5, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~5;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret34, stopRequestedAtCurrentFloor_#t~ret35, stopRequestedAtCurrentFloor_#t~ret36, stopRequestedAtCurrentFloor_~retValue_acc~15, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~3, stopRequestedAtCurrentFloor_~__cil_tmp4~0, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~15;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~0 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0 / 3); 1725482#L1681-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret33, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1725483#L138-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1725488#L165-66 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret32; 1725486#L1652-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~2;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~14; 1725471#L1664-1 stopRequestedAtCurrentFloor_#t~ret36 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~15 := stopRequestedAtCurrentFloor_#t~ret36;havoc stopRequestedAtCurrentFloor_#t~ret36;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~15; 1726084#L1692-1 timeShift_#t~ret49 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 1726082#L1829-1 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1725464#L1831-2 assume !(0 != ~persons_0~0); 1726070#L1831-3 assume !(0 != ~persons_1~0); 1726063#L1845-1 assume !(0 != ~persons_2~0); 1726053#L1859-1 assume !(0 != ~persons_3~0); 1726024#L1873-1 assume !(0 != ~persons_4~0); 1726020#L1887-1 assume !(0 != ~persons_5~0); 1726017#L1901-1 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_#t~ret41, processWaitingOnFloor_#t~ret42, processWaitingOnFloor_#t~ret43, processWaitingOnFloor_#t~ret44, processWaitingOnFloor_#t~ret45, processWaitingOnFloor_#t~ret46, processWaitingOnFloor_#t~ret47, processWaitingOnFloor_#t~ret48, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~10, processWaitingOnFloor_~tmp___0~4, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~10;havoc processWaitingOnFloor_~tmp___0~4;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1726016#L229-12 assume 0 == isPersonOnFloor_~floor; 1726010#L230-6 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725973#L401-6 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~4 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 1725971#L1730-2 assume !(0 != processWaitingOnFloor_~tmp___0~4); 1725969#L1730-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1725968#L229-14 assume 0 == isPersonOnFloor_~floor; 1725946#L230-7 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725929#L401-7 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 1725920#L1743-2 assume !(0 != processWaitingOnFloor_~tmp___2~2); 1725919#L1743-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1725916#L229-16 assume 0 == isPersonOnFloor_~floor; 1725833#L230-8 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725826#L401-8 processWaitingOnFloor_#t~ret41 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret41;havoc processWaitingOnFloor_#t~ret41; 1725817#L1756-2 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1725732#L1756-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1725731#L229-18 assume 0 == isPersonOnFloor_~floor; 1725720#L230-9 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725689#L401-9 processWaitingOnFloor_#t~ret43 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret43;havoc processWaitingOnFloor_#t~ret43; 1725687#L1769-2 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1725685#L1769-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1725679#L229-20 assume 0 == isPersonOnFloor_~floor; 1725646#L230-10 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725628#L401-10 processWaitingOnFloor_#t~ret45 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret45;havoc processWaitingOnFloor_#t~ret45; 1725620#L1782-2 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1725617#L1782-3 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~1;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~1; 1725616#L229-22 assume 0 == isPersonOnFloor_~floor; 1725611#L230-11 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~1; 1725574#L401-11 processWaitingOnFloor_#t~ret47 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret47;havoc processWaitingOnFloor_#t~ret47; 1725572#L1795-2 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1725570#L1795-3 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1725569#L173-26 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 1725564#L185-41 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1725563#L971-2 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1725556#L1635-11 havoc __utac_acc__Specification2_spec__3_#t~ret162, __utac_acc__Specification2_spec__3_#t~ret163, __utac_acc__Specification2_spec__3_#t~ret164, __utac_acc__Specification2_spec__3_#t~ret165, __utac_acc__Specification2_spec__3_#t~ret166, __utac_acc__Specification2_spec__3_#t~ret167, __utac_acc__Specification2_spec__3_~floor~0, __utac_acc__Specification2_spec__3_~tmp~27, __utac_acc__Specification2_spec__3_~tmp___0~11, __utac_acc__Specification2_spec__3_~tmp___1~8, __utac_acc__Specification2_spec__3_~tmp___2~6, __utac_acc__Specification2_spec__3_~tmp___3~5, __utac_acc__Specification2_spec__3_~tmp___4~3;havoc __utac_acc__Specification2_spec__3_~floor~0;havoc __utac_acc__Specification2_spec__3_~tmp~27;havoc __utac_acc__Specification2_spec__3_~tmp___0~11;havoc __utac_acc__Specification2_spec__3_~tmp___1~8;havoc __utac_acc__Specification2_spec__3_~tmp___2~6;havoc __utac_acc__Specification2_spec__3_~tmp___3~5;havoc __utac_acc__Specification2_spec__3_~tmp___4~3;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~4;havoc getCurrentFloorID_~retValue_acc~4;getCurrentFloorID_~retValue_acc~4 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~4; 1725555#L1000-3 __utac_acc__Specification2_spec__3_#t~ret162 := getCurrentFloorID_#res;__utac_acc__Specification2_spec__3_~tmp~27 := __utac_acc__Specification2_spec__3_#t~ret162;havoc __utac_acc__Specification2_spec__3_#t~ret162;__utac_acc__Specification2_spec__3_~floor~0 := __utac_acc__Specification2_spec__3_~tmp~27; 1725553#L3277-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0); 1725551#L3291-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0); 1725547#L3306-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0); 1725543#L3321-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0); 1725540#L3336-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0); 1725539#L3337-1 cleanup_~i~1 := 1 + cleanup_~i~1; 1711166#L2797-2 [2021-11-09 09:52:23,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:23,456 INFO L85 PathProgramCache]: Analyzing trace with hash -346678833, now seen corresponding path program 1 times [2021-11-09 09:52:23,456 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:23,456 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319732437] [2021-11-09 09:52:23,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:23,457 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:23,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:23,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:23,533 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:23,534 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319732437] [2021-11-09 09:52:23,534 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319732437] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:23,534 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:23,534 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:52:23,534 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371262882] [2021-11-09 09:52:23,535 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:52:23,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:52:23,536 INFO L85 PathProgramCache]: Analyzing trace with hash 888013357, now seen corresponding path program 2 times [2021-11-09 09:52:23,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:52:23,537 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774115680] [2021-11-09 09:52:23,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:52:23,538 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:52:23,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:52:23,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:52:23,581 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:52:23,582 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774115680] [2021-11-09 09:52:23,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774115680] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:52:23,582 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:52:23,582 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:52:23,582 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [886053136] [2021-11-09 09:52:23,583 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:52:23,583 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:52:23,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-09 09:52:23,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-09 09:52:23,587 INFO L87 Difference]: Start difference. First operand 48214 states and 88131 transitions. cyclomatic complexity: 39922 Second operand has 7 states, 7 states have (on average 8.857142857142858) internal successors, (62), 7 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:52:23,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:52:23,847 INFO L93 Difference]: Finished difference Result 48214 states and 88130 transitions. [2021-11-09 09:52:23,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-09 09:52:23,847 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48214 states and 88130 transitions. [2021-11-09 09:52:24,069 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 46780 [2021-11-09 09:52:24,232 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48214 states to 48214 states and 88130 transitions. [2021-11-09 09:52:24,232 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48214 [2021-11-09 09:52:24,271 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48214 [2021-11-09 09:52:24,271 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48214 states and 88130 transitions. [2021-11-09 09:52:24,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:52:24,303 INFO L681 BuchiCegarLoop]: Abstraction has 48214 states and 88130 transitions. [2021-11-09 09:52:24,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48214 states and 88130 transitions.