./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f4d752ef50871b3af82701ffcd8ca92c2975f63f8274731e1afbb137d2562986 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-22 02:26:34,287 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 02:26:34,289 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 02:26:34,330 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 02:26:34,330 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 02:26:34,332 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 02:26:34,336 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 02:26:34,339 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 02:26:34,341 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 02:26:34,346 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 02:26:34,347 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 02:26:34,352 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 02:26:34,352 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 02:26:34,354 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 02:26:34,355 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 02:26:34,359 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 02:26:34,359 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 02:26:34,360 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 02:26:34,362 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 02:26:34,365 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 02:26:34,367 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 02:26:34,368 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 02:26:34,369 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 02:26:34,371 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 02:26:34,372 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 02:26:34,376 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 02:26:34,376 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 02:26:34,376 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 02:26:34,377 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 02:26:34,377 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 02:26:34,378 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 02:26:34,378 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 02:26:34,380 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 02:26:34,381 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 02:26:34,382 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 02:26:34,382 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 02:26:34,383 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 02:26:34,383 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 02:26:34,383 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 02:26:34,384 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 02:26:34,384 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 02:26:34,386 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 02:26:34,386 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-22 02:26:34,424 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 02:26:34,425 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 02:26:34,425 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 02:26:34,426 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 02:26:34,427 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 02:26:34,427 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 02:26:34,427 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 02:26:34,427 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-22 02:26:34,428 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-22 02:26:34,428 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-22 02:26:34,429 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-22 02:26:34,429 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-22 02:26:34,429 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-22 02:26:34,429 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 02:26:34,429 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 02:26:34,430 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-22 02:26:34,430 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 02:26:34,430 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 02:26:34,430 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 02:26:34,430 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-22 02:26:34,431 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-22 02:26:34,431 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-22 02:26:34,431 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 02:26:34,431 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 02:26:34,431 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-22 02:26:34,432 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 02:26:34,432 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-22 02:26:34,432 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 02:26:34,432 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 02:26:34,432 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 02:26:34,433 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 02:26:34,434 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-22 02:26:34,434 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4d752ef50871b3af82701ffcd8ca92c2975f63f8274731e1afbb137d2562986 [2022-07-22 02:26:34,727 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 02:26:34,748 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 02:26:34,750 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 02:26:34,751 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 02:26:34,752 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 02:26:34,753 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c [2022-07-22 02:26:34,809 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/03af2b47c/fb10871a59ea48bd8d084b6e96b5943e/FLAG1ed8f279c [2022-07-22 02:26:35,369 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 02:26:35,370 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c [2022-07-22 02:26:35,383 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/03af2b47c/fb10871a59ea48bd8d084b6e96b5943e/FLAG1ed8f279c [2022-07-22 02:26:35,628 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/03af2b47c/fb10871a59ea48bd8d084b6e96b5943e [2022-07-22 02:26:35,630 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 02:26:35,631 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 02:26:35,632 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 02:26:35,632 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 02:26:35,635 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 02:26:35,636 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:26:35" (1/1) ... [2022-07-22 02:26:35,636 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@744cfc7a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:35, skipping insertion in model container [2022-07-22 02:26:35,637 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:26:35" (1/1) ... [2022-07-22 02:26:35,644 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 02:26:35,705 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 02:26:35,910 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c[17414,17427] [2022-07-22 02:26:36,090 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:26:36,103 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 02:26:36,141 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product17.cil.c[17414,17427] [2022-07-22 02:26:36,201 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:26:36,222 INFO L208 MainTranslator]: Completed translation [2022-07-22 02:26:36,222 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36 WrapperNode [2022-07-22 02:26:36,222 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 02:26:36,223 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 02:26:36,224 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 02:26:36,224 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 02:26:36,229 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,250 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,395 INFO L137 Inliner]: procedures = 90, calls = 332, calls flagged for inlining = 185, calls inlined = 276, statements flattened = 8497 [2022-07-22 02:26:36,395 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 02:26:36,396 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 02:26:36,396 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 02:26:36,396 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 02:26:36,403 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,403 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,418 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,419 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,486 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,551 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,561 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,577 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 02:26:36,578 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 02:26:36,578 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 02:26:36,578 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 02:26:36,579 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (1/1) ... [2022-07-22 02:26:36,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:26:36,591 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:26:36,604 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:26:36,614 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-22 02:26:36,640 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 02:26:36,641 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 02:26:36,641 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 02:26:36,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 02:26:36,905 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 02:26:36,906 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 02:26:40,031 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 02:26:40,065 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 02:26:40,065 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-22 02:26:40,071 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:26:40 BoogieIcfgContainer [2022-07-22 02:26:40,071 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 02:26:40,072 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-22 02:26:40,072 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-22 02:26:40,074 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-22 02:26:40,075 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:26:40,075 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 22.07 02:26:35" (1/3) ... [2022-07-22 02:26:40,076 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d35ce44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:26:40, skipping insertion in model container [2022-07-22 02:26:40,076 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:26:40,076 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:26:36" (2/3) ... [2022-07-22 02:26:40,077 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d35ce44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:26:40, skipping insertion in model container [2022-07-22 02:26:40,077 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:26:40,077 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:26:40" (3/3) ... [2022-07-22 02:26:40,078 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product17.cil.c [2022-07-22 02:26:40,155 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-22 02:26:40,155 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-22 02:26:40,155 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-22 02:26:40,155 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-22 02:26:40,155 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-22 02:26:40,156 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-22 02:26:40,156 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-22 02:26:40,156 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-22 02:26:40,169 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2471 states, 2470 states have (on average 1.8672064777327935) internal successors, (4612), 2470 states have internal predecessors, (4612), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:40,272 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1219 [2022-07-22 02:26:40,272 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:40,272 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:40,285 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:40,286 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:40,286 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-22 02:26:40,291 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2471 states, 2470 states have (on average 1.8672064777327935) internal successors, (4612), 2470 states have internal predecessors, (4612), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:40,317 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1219 [2022-07-22 02:26:40,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:40,318 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:40,321 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:40,321 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:40,327 INFO L752 eck$LassoCheckResult]: Stem: 619#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2346#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 571#L872true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 419#L865true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 514#L880true main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 904#L1324true assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 2138#L1296true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2122#L2801true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 317#L772true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 254#L797true bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2297#L409true assume 0 == initPersonOnFloor_~floor#1; 1062#L410true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1145#L517-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 226#L201true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 790#L213-2true assume { :end_inline_callOnFloor } true; 241#L553true assume { :end_inline_initPersonOnFloor } true; 217#L1100true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 225#L138true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 791#L165true stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 9#L2181true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1422#L2193true timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 628#L2330true assume !(0 != timeShift_~tmp___9~2#1); 25#L2421true assume !(1 == ~doorState~0); 1174#L2421-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1650#L1772true assume !(1 == stopRequestedInDirection_~dir#1); 1897#L1941true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1975#L2094true timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 503#L2429true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 631#L2148true assume !(1 == ~currentHeading~0); 1208#L2158true assume !(0 == ~currentFloorID~0); 338#L2158-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1038#L2164-1true assume { :end_inline_continueInDirection } true; 1146#L2438-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2452#L1568true __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 616#L2846true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2126#L2847true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1534#L1577true __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1577#L2851true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1058#L2906true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2292#L2453true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1338#L1128-2true [2022-07-22 02:26:40,328 INFO L754 eck$LassoCheckResult]: Loop: 1338#L1128-2true assume !false; 376#L1129true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2040#L1132true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1804#L1410true cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1714#L1136true assume 1 != cleanup_~tmp___0~2#1; 565#L1136-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1651#L138-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1447#L165-21true anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2185#L1676true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 569#L1740true isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 180#L1753true cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 670#L1148true assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 978#L138-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 258#L165-26true stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2015#L2181-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1361#L2193-1true timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 179#L2330-2true assume !(0 != timeShift_~tmp___9~2#1); 1922#L2421-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2362#L2421-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1236#L1772-2true assume !(1 == stopRequestedInDirection_~dir#1); 2327#L1941-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1357#L2094-2true timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 469#L2429-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1746#L2148-3true assume !(1 == ~currentHeading~0); 2443#L2158-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 352#L2158-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 471#L2164-7true assume { :end_inline_continueInDirection } true; 2343#L2438-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 491#L1568-1true __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 261#L2846-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 59#L2847-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 889#L1577-5true __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1234#L2851-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 315#L2906-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1937#L2453-1true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1338#L1128-2true [2022-07-22 02:26:40,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:40,334 INFO L85 PathProgramCache]: Analyzing trace with hash 1765344351, now seen corresponding path program 1 times [2022-07-22 02:26:40,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:40,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [592702090] [2022-07-22 02:26:40,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:40,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:40,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:40,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:40,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:40,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [592702090] [2022-07-22 02:26:40,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [592702090] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:40,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:40,591 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:40,592 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [689761121] [2022-07-22 02:26:40,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:40,596 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:40,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:40,597 INFO L85 PathProgramCache]: Analyzing trace with hash 1959754487, now seen corresponding path program 1 times [2022-07-22 02:26:40,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:40,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1265973741] [2022-07-22 02:26:40,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:40,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:40,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:40,642 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:40,642 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:40,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1265973741] [2022-07-22 02:26:40,643 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1265973741] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:40,643 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:40,643 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 02:26:40,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1863082220] [2022-07-22 02:26:40,643 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:40,644 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:40,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:40,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 02:26:40,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 02:26:40,678 INFO L87 Difference]: Start difference. First operand has 2471 states, 2470 states have (on average 1.8672064777327935) internal successors, (4612), 2470 states have internal predecessors, (4612), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:41,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:41,183 INFO L93 Difference]: Finished difference Result 4474 states and 8247 transitions. [2022-07-22 02:26:41,184 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 02:26:41,188 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4474 states and 8247 transitions. [2022-07-22 02:26:41,224 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2221 [2022-07-22 02:26:41,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4474 states to 4366 states and 8135 transitions. [2022-07-22 02:26:41,257 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4366 [2022-07-22 02:26:41,264 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4366 [2022-07-22 02:26:41,265 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4366 states and 8135 transitions. [2022-07-22 02:26:41,279 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:41,279 INFO L369 hiAutomatonCegarLoop]: Abstraction has 4366 states and 8135 transitions. [2022-07-22 02:26:41,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4366 states and 8135 transitions. [2022-07-22 02:26:41,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4366 to 2452. [2022-07-22 02:26:41,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2452 states, 2452 states have (on average 1.8690864600326265) internal successors, (4583), 2451 states have internal predecessors, (4583), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:41,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2452 states to 2452 states and 4583 transitions. [2022-07-22 02:26:41,375 INFO L392 hiAutomatonCegarLoop]: Abstraction has 2452 states and 4583 transitions. [2022-07-22 02:26:41,375 INFO L374 stractBuchiCegarLoop]: Abstraction has 2452 states and 4583 transitions. [2022-07-22 02:26:41,375 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-22 02:26:41,376 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2452 states and 4583 transitions. [2022-07-22 02:26:41,387 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1221 [2022-07-22 02:26:41,387 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:41,387 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:41,389 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:41,389 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:41,390 INFO L752 eck$LassoCheckResult]: Stem: 8192#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8193#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 8120#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7858#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 7859#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 8018#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 8559#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 9387#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 7674#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 7332#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7552#L409 assume 0 == initPersonOnFloor_~floor#1; 8733#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6986#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7497#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7498#L213-2 assume { :end_inline_callOnFloor } true; 7526#L553 assume { :end_inline_initPersonOnFloor } true; 7479#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7480#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7495#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 6997#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 6999#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 8375#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 7715#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 7716#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 9426#L2330 assume !(0 != timeShift_~tmp___9~2#1); 7043#L2421 assume !(1 == ~doorState~0); 7044#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 8853#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 9214#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 7206#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7995#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7996#L2148 assume !(1 == ~currentHeading~0); 8213#L2158 assume !(0 == ~currentFloorID~0); 7099#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7709#L2164-1 assume { :end_inline_continueInDirection } true; 8248#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 8820#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 8186#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 8187#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 9135#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 9136#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 7917#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 8728#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 9013#L1128-2 [2022-07-22 02:26:41,390 INFO L754 eck$LassoCheckResult]: Loop: 9013#L1128-2 assume !false; 7783#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7784#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 9291#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 9252#L1136 assume 1 != cleanup_~tmp___0~2#1; 8113#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 8114#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 8545#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 9078#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 7279#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7401#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 7402#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 8268#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7299#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 7558#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 8613#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7088#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 8866#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 8868#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 9427#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 9343#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9344#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 8914#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 8915#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 7103#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 7941#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 7943#L2148-3 assume !(1 == ~currentHeading~0); 9266#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7738#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7739#L2164-7 assume { :end_inline_continueInDirection } true; 7945#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 7979#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 7563#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 7118#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 7120#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 8546#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 7142#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7671#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 9013#L1128-2 [2022-07-22 02:26:41,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:41,391 INFO L85 PathProgramCache]: Analyzing trace with hash 130632768, now seen corresponding path program 1 times [2022-07-22 02:26:41,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:41,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121619993] [2022-07-22 02:26:41,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:41,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:41,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:41,441 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:41,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:41,442 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121619993] [2022-07-22 02:26:41,442 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121619993] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:41,442 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:41,442 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:41,442 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005084286] [2022-07-22 02:26:41,443 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:41,443 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:41,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:41,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1397495632, now seen corresponding path program 1 times [2022-07-22 02:26:41,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:41,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032564232] [2022-07-22 02:26:41,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:41,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:41,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:41,486 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:41,486 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:41,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032564232] [2022-07-22 02:26:41,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032564232] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:41,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:41,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:41,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1432786714] [2022-07-22 02:26:41,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:41,488 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:41,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:41,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:26:41,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:26:41,489 INFO L87 Difference]: Start difference. First operand 2452 states and 4583 transitions. cyclomatic complexity: 2132 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:43,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:43,524 INFO L93 Difference]: Finished difference Result 23189 states and 43217 transitions. [2022-07-22 02:26:43,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-07-22 02:26:43,525 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23189 states and 43217 transitions. [2022-07-22 02:26:43,691 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15350 [2022-07-22 02:26:43,814 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23189 states to 23189 states and 43217 transitions. [2022-07-22 02:26:43,815 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23189 [2022-07-22 02:26:43,845 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23189 [2022-07-22 02:26:43,846 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23189 states and 43217 transitions. [2022-07-22 02:26:43,881 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:43,882 INFO L369 hiAutomatonCegarLoop]: Abstraction has 23189 states and 43217 transitions. [2022-07-22 02:26:43,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23189 states and 43217 transitions. [2022-07-22 02:26:44,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23189 to 4856. [2022-07-22 02:26:44,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4856 states, 4856 states have (on average 1.8684102141680394) internal successors, (9073), 4855 states have internal predecessors, (9073), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:44,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4856 states to 4856 states and 9073 transitions. [2022-07-22 02:26:44,099 INFO L392 hiAutomatonCegarLoop]: Abstraction has 4856 states and 9073 transitions. [2022-07-22 02:26:44,100 INFO L374 stractBuchiCegarLoop]: Abstraction has 4856 states and 9073 transitions. [2022-07-22 02:26:44,100 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-22 02:26:44,100 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4856 states and 9073 transitions. [2022-07-22 02:26:44,117 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2448 [2022-07-22 02:26:44,118 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:44,118 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:44,122 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:44,122 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:44,123 INFO L752 eck$LassoCheckResult]: Stem: 33896#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 33897#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 33823#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 33554#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 33555#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 33716#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 34290#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 35217#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 33368#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 33019#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 33244#L409 assume 0 == initPersonOnFloor_~floor#1; 34478#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 32674#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 33187#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 33188#L213-2 assume { :end_inline_callOnFloor } true; 33217#L553 assume { :end_inline_initPersonOnFloor } true; 33218#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 33184#L138 assume !(0 == isFloorCalling_~floorID#1); 33186#L142 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 35433#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 35432#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 35430#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 35426#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 35425#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 35424#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 35422#L2330 assume !(0 != timeShift_~tmp___9~2#1); 35421#L2421 assume !(1 == ~doorState~0); 35420#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35418#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 35407#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 35401#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 35400#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 33917#L2148 assume !(1 == ~currentHeading~0); 33919#L2158 assume !(0 == ~currentFloorID~0); 33403#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 33404#L2164-1 assume { :end_inline_continueInDirection } true; 35378#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 35377#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 35376#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 35373#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 35369#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 35359#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 35356#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 35354#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 35353#L1128-2 [2022-07-22 02:26:44,123 INFO L754 eck$LassoCheckResult]: Loop: 35353#L1128-2 assume !false; 35352#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 35351#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 35350#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 35349#L1136 assume 1 != cleanup_~tmp___0~2#1; 35309#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 35001#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 34843#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 34844#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 35238#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 35310#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 35306#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 34374#L138-26 assume !(0 == isFloorCalling_~floorID#1); 34375#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 36502#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 36501#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 36496#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 36495#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 36494#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 36493#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 36491#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 36490#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 36489#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 36487#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 35270#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 32790#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 36458#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 36457#L2148-3 assume !(1 == ~currentHeading~0); 35295#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 34280#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36449#L2164-7 assume { :end_inline_continueInDirection } true; 36448#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 36447#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 36446#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 36444#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 36445#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 36435#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 36426#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 35355#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 35353#L1128-2 [2022-07-22 02:26:44,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:44,126 INFO L85 PathProgramCache]: Analyzing trace with hash 1179229433, now seen corresponding path program 1 times [2022-07-22 02:26:44,126 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:44,126 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165076797] [2022-07-22 02:26:44,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:44,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:44,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:44,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:44,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:44,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165076797] [2022-07-22 02:26:44,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165076797] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:44,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:44,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:44,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401114503] [2022-07-22 02:26:44,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:44,205 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:44,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:44,206 INFO L85 PathProgramCache]: Analyzing trace with hash 914196881, now seen corresponding path program 1 times [2022-07-22 02:26:44,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:44,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16368127] [2022-07-22 02:26:44,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:44,208 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:44,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:44,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:44,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:44,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16368127] [2022-07-22 02:26:44,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16368127] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:44,269 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:44,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:44,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643960530] [2022-07-22 02:26:44,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:44,270 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:44,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:44,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:26:44,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:26:44,272 INFO L87 Difference]: Start difference. First operand 4856 states and 9073 transitions. cyclomatic complexity: 4218 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:47,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:47,139 INFO L93 Difference]: Finished difference Result 17172 states and 31990 transitions. [2022-07-22 02:26:47,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-07-22 02:26:47,140 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17172 states and 31990 transitions. [2022-07-22 02:26:47,220 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9199 [2022-07-22 02:26:47,284 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17172 states to 17172 states and 31990 transitions. [2022-07-22 02:26:47,285 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17172 [2022-07-22 02:26:47,303 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17172 [2022-07-22 02:26:47,304 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17172 states and 31990 transitions. [2022-07-22 02:26:47,321 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:47,322 INFO L369 hiAutomatonCegarLoop]: Abstraction has 17172 states and 31990 transitions. [2022-07-22 02:26:47,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17172 states and 31990 transitions. [2022-07-22 02:26:47,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17172 to 8750. [2022-07-22 02:26:47,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8750 states, 8750 states have (on average 1.8656) internal successors, (16324), 8749 states have internal predecessors, (16324), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:47,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8750 states to 8750 states and 16324 transitions. [2022-07-22 02:26:47,535 INFO L392 hiAutomatonCegarLoop]: Abstraction has 8750 states and 16324 transitions. [2022-07-22 02:26:47,535 INFO L374 stractBuchiCegarLoop]: Abstraction has 8750 states and 16324 transitions. [2022-07-22 02:26:47,535 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-22 02:26:47,535 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8750 states and 16324 transitions. [2022-07-22 02:26:47,563 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4447 [2022-07-22 02:26:47,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:47,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:47,566 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:47,566 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:47,567 INFO L752 eck$LassoCheckResult]: Stem: 55990#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 55991#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 55916#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 55641#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 55642#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 55809#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 56381#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 57316#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 55454#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 55103#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 55328#L409 assume 0 == initPersonOnFloor_~floor#1; 56573#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 54758#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 55270#L201 assume !(0 == callOnFloor_~floorID#1); 55272#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 56240#L213-2 assume { :end_inline_callOnFloor } true; 56241#L553 assume { :end_inline_initPersonOnFloor } true; 55251#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 55252#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 57412#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 57470#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 57469#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 56186#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 55495#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 55497#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 57471#L2330 assume !(0 != timeShift_~tmp___9~2#1); 54814#L2421 assume !(1 == ~doorState~0); 54815#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 56698#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 57083#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 63405#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 63404#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 56011#L2148 assume !(1 == ~currentHeading~0); 56013#L2158 assume !(0 == ~currentFloorID~0); 54870#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55489#L2164-1 assume { :end_inline_continueInDirection } true; 56050#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 56663#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 55984#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 55985#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 56999#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 57000#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 55702#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 56568#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 56865#L1128-2 [2022-07-22 02:26:47,567 INFO L754 eck$LassoCheckResult]: Loop: 56865#L1128-2 assume !false; 55564#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 55565#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 57291#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 57468#L1136 assume 1 != cleanup_~tmp___0~2#1; 57467#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 57466#L138-21 assume !(0 == isFloorCalling_~floorID#1); 57454#L142-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 57440#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 57432#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 57423#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 57422#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 57421#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 57420#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 57419#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 57418#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 57417#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 54859#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 56711#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 56713#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 57472#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 57242#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 57243#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 56762#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 56763#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 63367#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 63365#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 63364#L2148-3 assume !(1 == ~currentHeading~0); 63363#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 55519#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55520#L2164-7 assume { :end_inline_continueInDirection } true; 55731#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 55765#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 55340#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 54889#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 54891#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 56368#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 54913#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 55451#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 56865#L1128-2 [2022-07-22 02:26:47,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:47,568 INFO L85 PathProgramCache]: Analyzing trace with hash 109574639, now seen corresponding path program 1 times [2022-07-22 02:26:47,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:47,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1018446587] [2022-07-22 02:26:47,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:47,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:47,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:47,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:47,630 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:47,630 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1018446587] [2022-07-22 02:26:47,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1018446587] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:47,631 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:47,631 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:47,634 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [636975700] [2022-07-22 02:26:47,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:47,635 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:47,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:47,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1064290691, now seen corresponding path program 1 times [2022-07-22 02:26:47,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:47,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993222364] [2022-07-22 02:26:47,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:47,639 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:47,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:47,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:47,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:47,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993222364] [2022-07-22 02:26:47,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993222364] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:47,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:47,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:47,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2021679211] [2022-07-22 02:26:47,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:47,718 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:47,718 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:47,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:26:47,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:26:47,720 INFO L87 Difference]: Start difference. First operand 8750 states and 16324 transitions. cyclomatic complexity: 7575 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:48,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:48,121 INFO L93 Difference]: Finished difference Result 9520 states and 17644 transitions. [2022-07-22 02:26:48,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:26:48,122 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9520 states and 17644 transitions. [2022-07-22 02:26:48,159 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4808 [2022-07-22 02:26:48,195 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9520 states to 9520 states and 17644 transitions. [2022-07-22 02:26:48,196 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9520 [2022-07-22 02:26:48,211 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9520 [2022-07-22 02:26:48,211 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9520 states and 17644 transitions. [2022-07-22 02:26:48,219 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:48,220 INFO L369 hiAutomatonCegarLoop]: Abstraction has 9520 states and 17644 transitions. [2022-07-22 02:26:48,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9520 states and 17644 transitions. [2022-07-22 02:26:48,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9520 to 8596. [2022-07-22 02:26:48,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8596 states, 8596 states have (on average 1.862261516984644) internal successors, (16008), 8595 states have internal predecessors, (16008), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:48,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8596 states to 8596 states and 16008 transitions. [2022-07-22 02:26:48,348 INFO L392 hiAutomatonCegarLoop]: Abstraction has 8596 states and 16008 transitions. [2022-07-22 02:26:48,348 INFO L374 stractBuchiCegarLoop]: Abstraction has 8596 states and 16008 transitions. [2022-07-22 02:26:48,348 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-22 02:26:48,349 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8596 states and 16008 transitions. [2022-07-22 02:26:48,369 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4325 [2022-07-22 02:26:48,370 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:48,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:48,372 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:48,372 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:48,374 INFO L752 eck$LassoCheckResult]: Stem: 74240#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 74241#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 74169#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 73909#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 73910#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 74071#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 74620#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 75490#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 73726#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 73378#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 73600#L409 assume 0 == initPersonOnFloor_~floor#1; 74799#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73035#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73544#L201 assume !(0 == callOnFloor_~floorID#1); 73546#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 74483#L213-2 assume { :end_inline_callOnFloor } true; 74484#L553 assume { :end_inline_initPersonOnFloor } true; 73525#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 73526#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 75578#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 75579#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 75831#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 75824#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 75821#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 75819#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 75816#L2330 assume !(0 != timeShift_~tmp___9~2#1); 75811#L2421 assume !(1 == ~doorState~0); 74918#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 74919#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 75292#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 73574#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 75666#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 75653#L2148 assume !(1 == ~currentHeading~0); 75644#L2158 assume !(0 == ~currentFloorID~0); 75635#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75627#L2164-1 assume { :end_inline_continueInDirection } true; 75622#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 75620#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 75616#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 75615#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 75611#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 75582#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 75576#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 75573#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 75572#L1128-2 [2022-07-22 02:26:48,375 INFO L754 eck$LassoCheckResult]: Loop: 75572#L1128-2 assume !false; 75571#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 75570#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 75569#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 75568#L1136 assume 1 != cleanup_~tmp___0~2#1; 75566#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 75567#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 75562#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 75563#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 76923#L1680 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 81565#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 76910#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 76909#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 76907#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 76906#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 76905#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 76904#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 73136#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 74932#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 74934#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 76913#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 76915#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 80473#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 74979#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 74980#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 80447#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 80445#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 80446#L2148-3 assume !(1 == ~currentHeading~0); 81564#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 73787#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 73788#L2164-7 assume { :end_inline_continueInDirection } true; 76903#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 75623#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 75621#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 75619#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 75614#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 75599#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 75577#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 75574#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 75572#L1128-2 [2022-07-22 02:26:48,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:48,375 INFO L85 PathProgramCache]: Analyzing trace with hash 109574639, now seen corresponding path program 2 times [2022-07-22 02:26:48,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:48,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1234283249] [2022-07-22 02:26:48,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:48,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:48,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:48,412 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:48,413 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:48,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1234283249] [2022-07-22 02:26:48,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1234283249] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:48,413 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:48,413 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:48,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136600225] [2022-07-22 02:26:48,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:48,414 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:48,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:48,414 INFO L85 PathProgramCache]: Analyzing trace with hash -884977042, now seen corresponding path program 1 times [2022-07-22 02:26:48,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:48,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1367587762] [2022-07-22 02:26:48,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:48,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:48,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:48,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:48,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:48,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1367587762] [2022-07-22 02:26:48,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1367587762] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:48,438 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:48,438 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:26:48,438 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907817433] [2022-07-22 02:26:48,438 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:48,439 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:48,439 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:48,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:26:48,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:26:48,440 INFO L87 Difference]: Start difference. First operand 8596 states and 16008 transitions. cyclomatic complexity: 7413 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:48,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:48,887 INFO L93 Difference]: Finished difference Result 33860 states and 63082 transitions. [2022-07-22 02:26:48,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:26:48,888 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33860 states and 63082 transitions. [2022-07-22 02:26:49,041 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22227 [2022-07-22 02:26:49,161 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33860 states to 33860 states and 63082 transitions. [2022-07-22 02:26:49,162 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33860 [2022-07-22 02:26:49,224 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33860 [2022-07-22 02:26:49,224 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33860 states and 63082 transitions. [2022-07-22 02:26:49,267 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:49,267 INFO L369 hiAutomatonCegarLoop]: Abstraction has 33860 states and 63082 transitions. [2022-07-22 02:26:49,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33860 states and 63082 transitions. [2022-07-22 02:26:49,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33860 to 15679. [2022-07-22 02:26:49,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15679 states, 15679 states have (on average 1.8618534345302633) internal successors, (29192), 15678 states have internal predecessors, (29192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:49,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15679 states to 15679 states and 29192 transitions. [2022-07-22 02:26:49,782 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15679 states and 29192 transitions. [2022-07-22 02:26:49,783 INFO L374 stractBuchiCegarLoop]: Abstraction has 15679 states and 29192 transitions. [2022-07-22 02:26:49,783 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-22 02:26:49,783 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15679 states and 29192 transitions. [2022-07-22 02:26:49,829 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8588 [2022-07-22 02:26:49,830 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:49,830 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:49,835 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:49,835 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:49,835 INFO L752 eck$LassoCheckResult]: Stem: 116741#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 116742#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 116668#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 116390#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 116391#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 116559#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 117146#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 118120#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 116204#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 115852#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116077#L409 assume 0 == initPersonOnFloor_~floor#1; 117334#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 115512#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 116021#L201 assume !(0 == callOnFloor_~floorID#1); 116023#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 116995#L213-2 assume { :end_inline_callOnFloor } true; 116996#L553 assume { :end_inline_initPersonOnFloor } true; 116002#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 116003#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 118223#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 118228#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 118225#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 118226#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 118469#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 118468#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 118467#L2330 assume !(0 != timeShift_~tmp___9~2#1); 118466#L2421 assume !(1 == ~doorState~0); 118465#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 118463#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 118461#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 118462#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 118477#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 118475#L2148 assume !(1 == ~currentHeading~0); 118473#L2158 assume !(0 == ~currentFloorID~0); 118474#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129205#L2164-1 assume { :end_inline_continueInDirection } true; 129202#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 129201#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 129200#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 129197#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 129193#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 129183#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 129180#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 129178#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 129101#L1128-2 [2022-07-22 02:26:49,836 INFO L754 eck$LassoCheckResult]: Loop: 129101#L1128-2 assume !false; 129100#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 129099#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 129098#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 125368#L1136 assume 1 != cleanup_~tmp___0~2#1; 125366#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 125363#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 125361#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 125359#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 125348#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 118903#L138-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 118888#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 118883#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 118656#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 118445#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 118440#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 118428#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 118427#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 118426#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 118420#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 118421#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 118415#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 118417#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 118410#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 118412#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 118401#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 118402#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 118537#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 118317#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 118318#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 118532#L2148-3 assume !(1 == ~currentHeading~0); 118533#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 116267#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 116268#L2164-7 assume { :end_inline_continueInDirection } true; 130238#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 130237#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 130236#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 130235#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 130232#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 130225#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 129879#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 129179#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 129101#L1128-2 [2022-07-22 02:26:49,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:49,837 INFO L85 PathProgramCache]: Analyzing trace with hash 109574639, now seen corresponding path program 3 times [2022-07-22 02:26:49,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:49,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1484397055] [2022-07-22 02:26:49,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:49,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:49,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:49,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:49,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:49,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1484397055] [2022-07-22 02:26:49,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1484397055] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:49,868 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:49,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:49,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1601653132] [2022-07-22 02:26:49,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:49,872 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:49,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:49,874 INFO L85 PathProgramCache]: Analyzing trace with hash 68336264, now seen corresponding path program 1 times [2022-07-22 02:26:49,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:49,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [568052844] [2022-07-22 02:26:49,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:49,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:49,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:49,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:49,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:49,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [568052844] [2022-07-22 02:26:49,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [568052844] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:49,916 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:49,916 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:26:49,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005299594] [2022-07-22 02:26:49,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:49,917 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:49,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:49,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:26:49,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:26:49,919 INFO L87 Difference]: Start difference. First operand 15679 states and 29192 transitions. cyclomatic complexity: 13514 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:50,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:50,452 INFO L93 Difference]: Finished difference Result 17042 states and 31483 transitions. [2022-07-22 02:26:50,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 02:26:50,452 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17042 states and 31483 transitions. [2022-07-22 02:26:50,638 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9334 [2022-07-22 02:26:50,683 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17042 states to 17042 states and 31483 transitions. [2022-07-22 02:26:50,684 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17042 [2022-07-22 02:26:50,695 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17042 [2022-07-22 02:26:50,696 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17042 states and 31483 transitions. [2022-07-22 02:26:50,711 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:50,711 INFO L369 hiAutomatonCegarLoop]: Abstraction has 17042 states and 31483 transitions. [2022-07-22 02:26:50,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17042 states and 31483 transitions. [2022-07-22 02:26:50,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17042 to 15679. [2022-07-22 02:26:50,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15679 states, 15679 states have (on average 1.8526691753300593) internal successors, (29048), 15678 states have internal predecessors, (29048), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:50,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15679 states to 15679 states and 29048 transitions. [2022-07-22 02:26:50,920 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15679 states and 29048 transitions. [2022-07-22 02:26:50,920 INFO L374 stractBuchiCegarLoop]: Abstraction has 15679 states and 29048 transitions. [2022-07-22 02:26:50,920 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-22 02:26:50,920 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15679 states and 29048 transitions. [2022-07-22 02:26:50,969 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8588 [2022-07-22 02:26:50,969 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:50,969 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:50,975 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:50,975 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:50,975 INFO L752 eck$LassoCheckResult]: Stem: 149472#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 149473#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 149397#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 149127#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 149128#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 149294#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 149867#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 150856#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 148943#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 148590#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148816#L409 assume 0 == initPersonOnFloor_~floor#1; 150061#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 148250#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 148761#L201 assume !(0 == callOnFloor_~floorID#1); 148763#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 149721#L213-2 assume { :end_inline_callOnFloor } true; 149722#L553 assume { :end_inline_initPersonOnFloor } true; 148743#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 148744#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 150969#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 150971#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 150970#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 149668#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 148982#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 148984#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 150972#L2330 assume !(0 != timeShift_~tmp___9~2#1); 150973#L2421 assume !(1 == ~doorState~0); 160154#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 160152#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 160153#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 160156#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 160155#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 160000#L2148 assume !(1 == ~currentHeading~0); 159992#L2158 assume !(0 == ~currentFloorID~0); 159991#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 159990#L2164-1 assume { :end_inline_continueInDirection } true; 159987#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 159986#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 159985#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 159983#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 159984#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 159968#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 151080#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 150997#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 150995#L1128-2 [2022-07-22 02:26:50,976 INFO L754 eck$LassoCheckResult]: Loop: 150995#L1128-2 assume !false; 150992#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 150989#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 150977#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 150975#L1136 assume 1 != cleanup_~tmp___0~2#1; 150976#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 150963#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 150964#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 150958#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 150960#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 151008#L138-22 assume !(0 == isFloorCalling_~floorID#1); 157531#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 157528#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 157527#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 157516#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 157515#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 157514#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 157513#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 157512#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 157455#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 149927#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 149928#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 157958#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 157957#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 157955#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 157954#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 157953#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 157896#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 157194#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 157179#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 157176#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 157174#L2148-3 assume !(1 == ~currentHeading~0); 157172#L2158-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 157167#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 157163#L2164-7 assume { :end_inline_continueInDirection } true; 157082#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 157081#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 157080#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 157078#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 157076#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 157073#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 151077#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 150998#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 150995#L1128-2 [2022-07-22 02:26:50,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:50,977 INFO L85 PathProgramCache]: Analyzing trace with hash 109574639, now seen corresponding path program 4 times [2022-07-22 02:26:50,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:50,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1881003535] [2022-07-22 02:26:50,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:50,977 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:50,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:51,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:51,023 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:51,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1881003535] [2022-07-22 02:26:51,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1881003535] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:51,023 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:51,023 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:51,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [588504791] [2022-07-22 02:26:51,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:51,024 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:51,024 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:51,025 INFO L85 PathProgramCache]: Analyzing trace with hash -320864090, now seen corresponding path program 1 times [2022-07-22 02:26:51,025 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:51,025 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1846983899] [2022-07-22 02:26:51,025 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:51,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:51,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:51,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:51,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:51,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1846983899] [2022-07-22 02:26:51,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1846983899] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:51,053 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:51,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:51,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [670629314] [2022-07-22 02:26:51,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:51,054 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:51,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:51,054 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:51,054 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:51,054 INFO L87 Difference]: Start difference. First operand 15679 states and 29048 transitions. cyclomatic complexity: 13370 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:51,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:51,349 INFO L93 Difference]: Finished difference Result 23727 states and 43757 transitions. [2022-07-22 02:26:51,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:26:51,353 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23727 states and 43757 transitions. [2022-07-22 02:26:51,421 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16360 [2022-07-22 02:26:51,467 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23727 states to 23727 states and 43757 transitions. [2022-07-22 02:26:51,467 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23727 [2022-07-22 02:26:51,483 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23727 [2022-07-22 02:26:51,483 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23727 states and 43757 transitions. [2022-07-22 02:26:51,502 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:51,502 INFO L369 hiAutomatonCegarLoop]: Abstraction has 23727 states and 43757 transitions. [2022-07-22 02:26:51,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23727 states and 43757 transitions. [2022-07-22 02:26:51,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23727 to 15697. [2022-07-22 02:26:51,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15697 states, 15697 states have (on average 1.8516914060011467) internal successors, (29066), 15696 states have internal predecessors, (29066), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:51,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15697 states to 15697 states and 29066 transitions. [2022-07-22 02:26:51,913 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15697 states and 29066 transitions. [2022-07-22 02:26:51,913 INFO L374 stractBuchiCegarLoop]: Abstraction has 15697 states and 29066 transitions. [2022-07-22 02:26:51,913 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-22 02:26:51,914 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15697 states and 29066 transitions. [2022-07-22 02:26:51,981 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8600 [2022-07-22 02:26:51,982 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:51,982 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:51,992 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:51,993 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:51,993 INFO L752 eck$LassoCheckResult]: Stem: 188886#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 188887#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 188811#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 188541#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 188542#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 188706#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 189297#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 190302#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 188357#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 188006#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 188230#L409 assume 0 == initPersonOnFloor_~floor#1; 189485#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 187667#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 188174#L201 assume !(0 == callOnFloor_~floorID#1); 188176#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 189147#L213-2 assume { :end_inline_callOnFloor } true; 189148#L553 assume { :end_inline_initPersonOnFloor } true; 188156#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 188157#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 190402#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 190407#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 190404#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 190405#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 190491#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 190490#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 190489#L2330 assume !(0 != timeShift_~tmp___9~2#1); 190488#L2421 assume !(1 == ~doorState~0); 190487#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 190485#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 190486#L1941 assume !(0 == ~currentFloorID~0); 189416#L1947 assume !(~currentFloorID~0 > 0); 189418#L1962 assume ~currentFloorID~0 > 0; 190342#L1964 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 188835#L1965 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 188836#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 191941#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 191942#L2148 assume !(1 == ~currentHeading~0); 202993#L2158 assume !(0 == ~currentFloorID~0); 202992#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189453#L2164-1 assume { :end_inline_continueInDirection } true; 188947#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 202987#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 202986#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 202985#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 189937#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 189938#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 188603#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 189480#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 189781#L1128-2 [2022-07-22 02:26:51,994 INFO L754 eck$LassoCheckResult]: Loop: 189781#L1128-2 assume !false; 188465#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 188466#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 190142#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 190143#L1136 assume 1 != cleanup_~tmp___0~2#1; 202708#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 202706#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 202705#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 202703#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 190635#L1680 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 190634#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 190633#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 190632#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 190630#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 190629#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 190628#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 190627#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 190624#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 190620#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 190618#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 190615#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 190612#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 190597#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 190598#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 190592#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 190593#L1941-2 assume !(0 == ~currentFloorID~0); 190367#L1947-2 assume !(~currentFloorID~0 > 0); 190384#L1962-2 assume ~currentFloorID~0 > 0; 190385#L1964-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 187782#L1965-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 187783#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 193043#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 193044#L2148-3 assume !(1 == ~currentHeading~0); 190393#L2158-9 assume !(0 == ~currentFloorID~0); 189285#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 188632#L2164-7 assume { :end_inline_continueInDirection } true; 188633#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 188667#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 188242#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 187797#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 187799#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 189278#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 187821#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 188354#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 189781#L1128-2 [2022-07-22 02:26:51,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:51,994 INFO L85 PathProgramCache]: Analyzing trace with hash 21370840, now seen corresponding path program 1 times [2022-07-22 02:26:51,995 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:51,995 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1943890126] [2022-07-22 02:26:51,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:51,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:52,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:52,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:52,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:52,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1943890126] [2022-07-22 02:26:52,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1943890126] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:52,036 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:52,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:52,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [192625602] [2022-07-22 02:26:52,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:52,037 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:52,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:52,038 INFO L85 PathProgramCache]: Analyzing trace with hash -481143442, now seen corresponding path program 1 times [2022-07-22 02:26:52,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:52,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835488143] [2022-07-22 02:26:52,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:52,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:52,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:52,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:52,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:52,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835488143] [2022-07-22 02:26:52,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [835488143] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:52,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:52,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:26:52,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495734988] [2022-07-22 02:26:52,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:52,071 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:52,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:52,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:26:52,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:26:52,072 INFO L87 Difference]: Start difference. First operand 15697 states and 29066 transitions. cyclomatic complexity: 13370 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:53,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:53,103 INFO L93 Difference]: Finished difference Result 21393 states and 39528 transitions. [2022-07-22 02:26:53,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:26:53,104 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21393 states and 39528 transitions. [2022-07-22 02:26:53,183 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16547 [2022-07-22 02:26:53,340 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21393 states to 21393 states and 39528 transitions. [2022-07-22 02:26:53,340 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21393 [2022-07-22 02:26:53,367 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21393 [2022-07-22 02:26:53,368 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21393 states and 39528 transitions. [2022-07-22 02:26:53,380 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:53,380 INFO L369 hiAutomatonCegarLoop]: Abstraction has 21393 states and 39528 transitions. [2022-07-22 02:26:53,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21393 states and 39528 transitions. [2022-07-22 02:26:53,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21393 to 11907. [2022-07-22 02:26:53,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11907 states, 11907 states have (on average 1.8414378096917778) internal successors, (21926), 11906 states have internal predecessors, (21926), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:53,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11907 states to 11907 states and 21926 transitions. [2022-07-22 02:26:53,531 INFO L392 hiAutomatonCegarLoop]: Abstraction has 11907 states and 21926 transitions. [2022-07-22 02:26:53,531 INFO L374 stractBuchiCegarLoop]: Abstraction has 11907 states and 21926 transitions. [2022-07-22 02:26:53,531 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-22 02:26:53,531 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11907 states and 21926 transitions. [2022-07-22 02:26:53,558 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8644 [2022-07-22 02:26:53,558 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:53,558 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:53,559 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:53,559 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:53,560 INFO L752 eck$LassoCheckResult]: Stem: 225927#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 225928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 225859#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 225609#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 225610#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 225765#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 226315#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 227199#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 225429#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 225110#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 225304#L409 assume 0 == initPersonOnFloor_~floor#1; 226482#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 224778#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 225251#L201 assume !(0 == callOnFloor_~floorID#1); 225253#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 226444#L213-2 assume { :end_inline_callOnFloor } true; 227281#L553 assume { :end_inline_initPersonOnFloor } true; 227280#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 227279#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 227278#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 227277#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 227276#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 226116#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 225464#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 225466#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 227282#L2330 assume !(0 != timeShift_~tmp___9~2#1); 224834#L2421 assume !(1 == ~doorState~0); 224835#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 226600#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 226976#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 225279#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 225741#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 225742#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 226442#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 225929#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 225631#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 225588#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 226526#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 227021#L2148-2 assume !(1 == ~currentHeading~0); 225061#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 225062#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 225186#L2164-5 assume { :end_inline_continueInDirection } true; 225986#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 230993#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 230992#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 230989#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 230985#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 230975#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 230972#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 230971#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 230970#L1128-2 [2022-07-22 02:26:53,560 INFO L754 eck$LassoCheckResult]: Loop: 230970#L1128-2 assume !false; 230969#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 230968#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 230967#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 230966#L1136 assume 1 != cleanup_~tmp___0~2#1; 230965#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 230964#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 230963#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 230961#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 230960#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 230959#L138-22 assume !(0 == isFloorCalling_~floorID#1); 230957#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 230954#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 230953#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 230942#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 230941#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 230940#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 230939#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 227313#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 227312#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 227311#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 227310#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 227308#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 227307#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 227305#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 227123#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 227124#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 226664#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 226665#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 226310#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 225689#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 225690#L2203-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 226758#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 226371#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 225724#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 225263#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 227146#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 227147#L2148-5 assume !(1 == ~currentHeading~0); 227167#L2158-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 225558#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 227232#L2164-11 assume { :end_inline_continueInDirection } true; 235519#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 235518#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 235516#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 235514#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 235513#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 235510#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 227394#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 227395#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 230970#L1128-2 [2022-07-22 02:26:53,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:53,561 INFO L85 PathProgramCache]: Analyzing trace with hash -393654314, now seen corresponding path program 1 times [2022-07-22 02:26:53,561 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:53,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1240745610] [2022-07-22 02:26:53,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:53,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:53,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:53,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:53,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:53,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1240745610] [2022-07-22 02:26:53,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1240745610] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:53,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:53,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:53,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223753819] [2022-07-22 02:26:53,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:53,588 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:53,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:53,588 INFO L85 PathProgramCache]: Analyzing trace with hash -851576365, now seen corresponding path program 1 times [2022-07-22 02:26:53,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:53,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669067214] [2022-07-22 02:26:53,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:53,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:53,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:53,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:53,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:53,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669067214] [2022-07-22 02:26:53,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669067214] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:53,612 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:53,612 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:53,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1735821125] [2022-07-22 02:26:53,613 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:53,613 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:53,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:53,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:53,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:53,615 INFO L87 Difference]: Start difference. First operand 11907 states and 21926 transitions. cyclomatic complexity: 10020 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:53,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:53,795 INFO L93 Difference]: Finished difference Result 35643 states and 65569 transitions. [2022-07-22 02:26:53,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:26:53,796 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35643 states and 65569 transitions. [2022-07-22 02:26:54,079 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32211 [2022-07-22 02:26:54,153 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35643 states to 35643 states and 65569 transitions. [2022-07-22 02:26:54,153 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35643 [2022-07-22 02:26:54,174 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35643 [2022-07-22 02:26:54,174 INFO L73 IsDeterministic]: Start isDeterministic. Operand 35643 states and 65569 transitions. [2022-07-22 02:26:54,194 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:54,194 INFO L369 hiAutomatonCegarLoop]: Abstraction has 35643 states and 65569 transitions. [2022-07-22 02:26:54,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35643 states and 65569 transitions. [2022-07-22 02:26:54,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35643 to 11919. [2022-07-22 02:26:54,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11919 states, 11919 states have (on average 1.8405906535783203) internal successors, (21938), 11918 states have internal predecessors, (21938), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:54,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11919 states to 11919 states and 21938 transitions. [2022-07-22 02:26:54,412 INFO L392 hiAutomatonCegarLoop]: Abstraction has 11919 states and 21938 transitions. [2022-07-22 02:26:54,412 INFO L374 stractBuchiCegarLoop]: Abstraction has 11919 states and 21938 transitions. [2022-07-22 02:26:54,412 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-22 02:26:54,412 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11919 states and 21938 transitions. [2022-07-22 02:26:54,442 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8654 [2022-07-22 02:26:54,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:54,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:54,443 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:54,443 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:54,443 INFO L752 eck$LassoCheckResult]: Stem: 273484#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 273485#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 273416#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 273169#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 273170#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 273323#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 273869#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 274746#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 272991#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 272672#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 272865#L409 assume 0 == initPersonOnFloor_~floor#1; 274034#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 272339#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 272814#L201 assume !(0 == callOnFloor_~floorID#1); 272816#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 273729#L213-2 assume { :end_inline_callOnFloor } true; 273730#L553 assume { :end_inline_initPersonOnFloor } true; 274828#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 274827#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 274825#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 274824#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 274823#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 273675#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 273027#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 273029#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 274829#L2330 assume !(0 != timeShift_~tmp___9~2#1); 272395#L2421 assume !(1 == ~doorState~0); 272396#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 274152#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 274538#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 272841#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 273299#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 273300#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 273996#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 274831#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 273189#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 273146#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 274081#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 274580#L2148-2 assume !(1 == ~currentHeading~0); 272622#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 272623#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 272748#L2164-5 assume { :end_inline_continueInDirection } true; 273542#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 274117#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 273478#L2846 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 273479#L2847 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 274450#L1577 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 274451#L2851 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 273224#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 274031#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 275031#L1128-2 [2022-07-22 02:26:54,444 INFO L754 eck$LassoCheckResult]: Loop: 275031#L1128-2 assume !false; 275032#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 275027#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 275028#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 275023#L1136 assume 1 != cleanup_~tmp___0~2#1; 275024#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 275018#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 275019#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 275009#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 275011#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 277097#L138-22 assume !(0 == isFloorCalling_~floorID#1); 282637#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 282634#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 282633#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 282622#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 274959#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 274960#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 280530#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 274931#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 274930#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 274929#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 274928#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 274926#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 274925#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 274923#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 274922#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 274913#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 274891#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 274879#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 274865#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 274864#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 274862#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 274861#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 274860#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 273283#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 273284#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 277514#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 277511#L2148-5 assume !(1 == ~currentHeading~0); 277508#L2158-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 277507#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 277506#L2164-11 assume { :end_inline_continueInDirection } true; 277503#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 277502#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 277501#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 277456#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 277449#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 277443#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 277070#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 277071#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 275031#L1128-2 [2022-07-22 02:26:54,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:54,445 INFO L85 PathProgramCache]: Analyzing trace with hash -393654314, now seen corresponding path program 2 times [2022-07-22 02:26:54,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:54,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923282582] [2022-07-22 02:26:54,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:54,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:54,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:54,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:54,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:54,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923282582] [2022-07-22 02:26:54,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923282582] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:54,473 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:54,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:54,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581369335] [2022-07-22 02:26:54,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:54,474 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:54,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:54,475 INFO L85 PathProgramCache]: Analyzing trace with hash 1449246225, now seen corresponding path program 1 times [2022-07-22 02:26:54,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:54,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503439725] [2022-07-22 02:26:54,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:54,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:54,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:54,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:54,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:54,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503439725] [2022-07-22 02:26:54,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503439725] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:54,534 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:54,535 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:54,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050290381] [2022-07-22 02:26:54,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:54,535 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:54,535 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:54,536 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:26:54,536 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:26:54,536 INFO L87 Difference]: Start difference. First operand 11919 states and 21938 transitions. cyclomatic complexity: 10020 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:55,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:55,842 INFO L93 Difference]: Finished difference Result 28336 states and 51974 transitions. [2022-07-22 02:26:55,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-22 02:26:55,843 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28336 states and 51974 transitions. [2022-07-22 02:26:55,943 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25050 [2022-07-22 02:26:56,020 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28336 states to 28336 states and 51974 transitions. [2022-07-22 02:26:56,021 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28336 [2022-07-22 02:26:56,040 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28336 [2022-07-22 02:26:56,041 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28336 states and 51974 transitions. [2022-07-22 02:26:56,060 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:56,060 INFO L369 hiAutomatonCegarLoop]: Abstraction has 28336 states and 51974 transitions. [2022-07-22 02:26:56,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28336 states and 51974 transitions. [2022-07-22 02:26:56,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28336 to 15582. [2022-07-22 02:26:56,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15582 states, 15582 states have (on average 1.8443717109485303) internal successors, (28739), 15581 states have internal predecessors, (28739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:56,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15582 states to 15582 states and 28739 transitions. [2022-07-22 02:26:56,467 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15582 states and 28739 transitions. [2022-07-22 02:26:56,467 INFO L374 stractBuchiCegarLoop]: Abstraction has 15582 states and 28739 transitions. [2022-07-22 02:26:56,467 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-22 02:26:56,467 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15582 states and 28739 transitions. [2022-07-22 02:26:56,499 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:56,499 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:56,499 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:56,505 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:56,505 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:56,505 INFO L752 eck$LassoCheckResult]: Stem: 313782#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 313783#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 313713#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 313460#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 313461#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 313619#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 314181#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 315107#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 313280#L772 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 312964#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 313157#L409 assume 0 == initPersonOnFloor_~floor#1; 314352#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 312629#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 313105#L201 assume !(0 == callOnFloor_~floorID#1); 313107#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 314316#L213-2 assume { :end_inline_callOnFloor } true; 315208#L553 assume { :end_inline_initPersonOnFloor } true; 315207#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 315206#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 315204#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 315203#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 315202#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 313977#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 313316#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 313318#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 315209#L2330 assume !(0 != timeShift_~tmp___9~2#1); 312685#L2421 assume !(1 == ~doorState~0); 312686#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 314473#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 314865#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 313132#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 313595#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 313596#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 314314#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 315210#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 313483#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 313439#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 314398#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 314917#L2148-2 assume !(1 == ~currentHeading~0); 312914#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 312915#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 313039#L2164-5 assume { :end_inline_continueInDirection } true; 313844#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 315201#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 313777#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 313778#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 320961#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 315255#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 315256#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 320955#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 320953#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 320952#L1128-2 [2022-07-22 02:26:56,506 INFO L754 eck$LassoCheckResult]: Loop: 320952#L1128-2 assume !false; 320951#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 320899#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 320896#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 320895#L1136 assume 1 != cleanup_~tmp___0~2#1; 320890#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 320876#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 320872#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 320801#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 320759#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 320756#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 320753#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 320750#L138-26 assume !(0 == isFloorCalling_~floorID#1); 320743#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 320740#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 320736#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 320737#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 320543#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 320519#L2332-2 assume !(0 != ~persons_0~0); 319914#L2332-3 assume !(0 != ~persons_1~0); 319894#L2346-1 assume !(0 != ~persons_2~0); 319884#L2360-1 assume !(0 != ~persons_3~0); 319878#L2374-1 assume !(0 != ~persons_4~0); 319873#L2388-1 assume !(0 != ~persons_5~0); 319869#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 319868#L229-12 assume 0 == isPersonOnFloor_~floor#1; 318363#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318333#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 318330#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 318328#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 318321#L229-14 assume 0 == isPersonOnFloor_~floor#1; 318294#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318279#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 318277#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 318275#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 318274#L229-16 assume 0 == isPersonOnFloor_~floor#1; 318167#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318161#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 318159#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 318157#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 318156#L229-18 assume 0 == isPersonOnFloor_~floor#1; 318143#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318120#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 318118#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 318119#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 318631#L229-20 assume 0 == isPersonOnFloor_~floor#1; 318602#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318589#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 318587#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 318585#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 318584#L229-22 assume 0 == isPersonOnFloor_~floor#1; 318549#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 318548#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 318546#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 318547#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 320851#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 320852#L185-41 assume { :end_inline_resetCallOnFloor } true; 320990#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 320987#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 317360#L1551-5 assume { :end_inline_resetFloorButton } true; 320981#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 320980#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 320979#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 320978#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 320964#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 320969#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 320967#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 320962#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 320954#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 320952#L1128-2 [2022-07-22 02:26:56,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:56,507 INFO L85 PathProgramCache]: Analyzing trace with hash -1794429226, now seen corresponding path program 1 times [2022-07-22 02:26:56,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:56,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995717811] [2022-07-22 02:26:56,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:56,508 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:56,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:56,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:56,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:56,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995717811] [2022-07-22 02:26:56,532 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995717811] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:56,532 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:56,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:26:56,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [195189919] [2022-07-22 02:26:56,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:56,533 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:56,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:56,533 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 1 times [2022-07-22 02:26:56,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:56,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [927398142] [2022-07-22 02:26:56,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:56,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:56,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:56,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:56,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:56,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [927398142] [2022-07-22 02:26:56,567 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [927398142] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:56,567 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:56,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:56,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862582288] [2022-07-22 02:26:56,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:56,568 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:56,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:56,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:26:56,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:26:56,569 INFO L87 Difference]: Start difference. First operand 15582 states and 28739 transitions. cyclomatic complexity: 13158 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:56,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:56,640 INFO L93 Difference]: Finished difference Result 15582 states and 28733 transitions. [2022-07-22 02:26:56,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:26:56,641 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15582 states and 28733 transitions. [2022-07-22 02:26:56,711 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:56,743 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15582 states to 15582 states and 28733 transitions. [2022-07-22 02:26:56,743 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15582 [2022-07-22 02:26:56,751 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15582 [2022-07-22 02:26:56,751 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15582 states and 28733 transitions. [2022-07-22 02:26:56,760 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:56,760 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15582 states and 28733 transitions. [2022-07-22 02:26:56,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15582 states and 28733 transitions. [2022-07-22 02:26:57,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15582 to 15582. [2022-07-22 02:26:57,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15582 states, 15582 states have (on average 1.8439866512642793) internal successors, (28733), 15581 states have internal predecessors, (28733), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:57,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15582 states to 15582 states and 28733 transitions. [2022-07-22 02:26:57,079 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15582 states and 28733 transitions. [2022-07-22 02:26:57,079 INFO L374 stractBuchiCegarLoop]: Abstraction has 15582 states and 28733 transitions. [2022-07-22 02:26:57,079 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-22 02:26:57,079 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15582 states and 28733 transitions. [2022-07-22 02:26:57,107 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:57,107 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:57,107 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:57,110 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:57,110 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:57,111 INFO L752 eck$LassoCheckResult]: Stem: 344950#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 344951#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 344883#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 344637#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 344638#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 344790#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 345330#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 346208#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 344457#L772 assume !(0 == getOrigin_~person#1); 344458#L776 assume !(1 == getOrigin_~person#1); 344137#L780 assume !(2 == getOrigin_~person#1); 344138#L784 assume !(3 == getOrigin_~person#1); 345351#L788 assume !(4 == getOrigin_~person#1); 345552#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 344332#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 344333#L409 assume 0 == initPersonOnFloor_~floor#1; 345493#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 343804#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 344279#L201 assume !(0 == callOnFloor_~floorID#1); 344281#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 345456#L213-2 assume { :end_inline_callOnFloor } true; 346286#L553 assume { :end_inline_initPersonOnFloor } true; 346285#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 346284#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 346282#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 346281#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 346280#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 345143#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 344493#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 344495#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 346287#L2330 assume !(0 != timeShift_~tmp___9~2#1); 343860#L2421 assume !(1 == ~doorState~0); 343861#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 345610#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 345985#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 344307#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 344767#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 344768#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 345454#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 346288#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 344659#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 344616#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 345536#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 346034#L2148-2 assume !(1 == ~currentHeading~0); 344089#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 344090#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 344213#L2164-5 assume { :end_inline_continueInDirection } true; 345010#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 345574#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 344945#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 344946#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 346804#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 346801#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 346794#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 346790#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 346787#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 346788#L1128-2 [2022-07-22 02:26:57,111 INFO L754 eck$LassoCheckResult]: Loop: 346788#L1128-2 assume !false; 356046#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 356045#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 356044#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 356043#L1136 assume 1 != cleanup_~tmp___0~2#1; 356042#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 356041#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 356040#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 356038#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 356039#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 359335#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 359334#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 346517#L138-26 assume !(0 == isFloorCalling_~floorID#1); 346254#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 344105#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 344339#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 345628#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 344197#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 344198#L2332-2 assume !(0 != ~persons_0~0); 344238#L2332-3 assume !(0 != ~persons_1~0); 345754#L2346-1 assume !(0 != ~persons_2~0); 343850#L2360-1 assume !(0 != ~persons_3~0); 345300#L2374-1 assume !(0 != ~persons_4~0); 344856#L2388-1 assume !(0 != ~persons_5~0); 345367#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 345048#L229-12 assume 0 == isPersonOnFloor_~floor#1; 345049#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 356439#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 356438#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 356436#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 356435#L229-14 assume 0 == isPersonOnFloor_~floor#1; 356414#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 356400#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 356398#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 356396#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 356395#L229-16 assume 0 == isPersonOnFloor_~floor#1; 356364#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 356359#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 356358#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 356356#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 356355#L229-18 assume 0 == isPersonOnFloor_~floor#1; 352697#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 352673#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 352671#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 352669#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 352667#L229-20 assume 0 == isPersonOnFloor_~floor#1; 352668#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 356222#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 356220#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 356218#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 356217#L229-22 assume 0 == isPersonOnFloor_~floor#1; 356178#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 356171#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 356084#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 356082#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 356077#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 356073#L185-41 assume { :end_inline_resetCallOnFloor } true; 356072#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 356069#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 355643#L1551-5 assume { :end_inline_resetFloorButton } true; 344719#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 356066#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 356065#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 356064#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 356050#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 356055#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 356053#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 356048#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 356047#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 346788#L1128-2 [2022-07-22 02:26:57,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:57,111 INFO L85 PathProgramCache]: Analyzing trace with hash -1165229915, now seen corresponding path program 1 times [2022-07-22 02:26:57,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:57,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619095322] [2022-07-22 02:26:57,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:57,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:57,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:57,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:57,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:57,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619095322] [2022-07-22 02:26:57,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619095322] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:57,172 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:57,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 02:26:57,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [810689837] [2022-07-22 02:26:57,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:57,173 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:57,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:57,173 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 2 times [2022-07-22 02:26:57,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:57,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1428137529] [2022-07-22 02:26:57,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:57,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:57,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:57,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:57,206 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:57,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1428137529] [2022-07-22 02:26:57,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1428137529] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:57,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:57,206 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:57,206 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693626104] [2022-07-22 02:26:57,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:57,207 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:57,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:57,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 02:26:57,207 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 02:26:57,208 INFO L87 Difference]: Start difference. First operand 15582 states and 28733 transitions. cyclomatic complexity: 13152 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:57,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:57,322 INFO L93 Difference]: Finished difference Result 15576 states and 28720 transitions. [2022-07-22 02:26:57,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 02:26:57,323 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15576 states and 28720 transitions. [2022-07-22 02:26:57,396 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:57,445 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15576 states to 15576 states and 28720 transitions. [2022-07-22 02:26:57,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15576 [2022-07-22 02:26:57,459 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15576 [2022-07-22 02:26:57,460 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15576 states and 28720 transitions. [2022-07-22 02:26:57,470 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:57,471 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28720 transitions. [2022-07-22 02:26:57,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15576 states and 28720 transitions. [2022-07-22 02:26:57,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15576 to 15576. [2022-07-22 02:26:57,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15576 states, 15576 states have (on average 1.8438623523369286) internal successors, (28720), 15575 states have internal predecessors, (28720), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:57,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15576 states to 15576 states and 28720 transitions. [2022-07-22 02:26:57,782 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28720 transitions. [2022-07-22 02:26:57,783 INFO L374 stractBuchiCegarLoop]: Abstraction has 15576 states and 28720 transitions. [2022-07-22 02:26:57,783 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-22 02:26:57,783 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15576 states and 28720 transitions. [2022-07-22 02:26:57,827 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:57,828 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:57,828 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:57,832 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:57,832 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:57,832 INFO L752 eck$LassoCheckResult]: Stem: 376119#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 376120#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 376053#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 375810#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 375811#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 375962#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 376487#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 377308#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 375630#L772 assume !(0 == getOrigin_~person#1); 375631#L776 assume !(1 == getOrigin_~person#1); 375308#L780 assume !(2 == getOrigin_~person#1); 375309#L784 assume !(3 == getOrigin_~person#1); 376508#L788 assume !(4 == getOrigin_~person#1); 376702#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 375503#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 375504#L409 assume !(0 == initPersonOnFloor_~floor#1); 375967#L436 assume 1 == initPersonOnFloor_~floor#1; 375968#L437 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 375839#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 375451#L201 assume !(0 == callOnFloor_~floorID#1); 375453#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 376609#L213-2 assume { :end_inline_callOnFloor } true; 377379#L553 assume { :end_inline_initPersonOnFloor } true; 377378#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 377377#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 377375#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 377374#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 377373#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 376306#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 375667#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 375669#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 377380#L2330 assume !(0 != timeShift_~tmp___9~2#1); 375038#L2421 assume !(1 == ~doorState~0); 375039#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 376757#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 377118#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 375479#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 375937#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 375938#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 376607#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 377381#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 375834#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 375787#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 376687#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 377159#L2148-2 assume !(1 == ~currentHeading~0); 375262#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 375263#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 375385#L2164-5 assume { :end_inline_continueInDirection } true; 376177#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 376725#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 376116#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 376117#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 383753#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 383750#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 383743#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 383739#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 383737#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 383736#L1128-2 [2022-07-22 02:26:57,833 INFO L754 eck$LassoCheckResult]: Loop: 383736#L1128-2 assume !false; 383735#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 383649#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 383646#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 383359#L1136 assume 1 != cleanup_~tmp___0~2#1; 383353#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 383350#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 383347#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 381640#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 381641#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 390144#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 390143#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 390142#L138-26 assume !(0 == isFloorCalling_~floorID#1); 390139#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 390137#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 390123#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 390121#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 390114#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 390089#L2332-2 assume !(0 != ~persons_0~0); 390086#L2332-3 assume !(0 != ~persons_1~0); 388061#L2346-1 assume !(0 != ~persons_2~0); 388051#L2360-1 assume !(0 != ~persons_3~0); 388045#L2374-1 assume !(0 != ~persons_4~0); 388040#L2388-1 assume !(0 != ~persons_5~0); 388036#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 388034#L229-12 assume 0 == isPersonOnFloor_~floor#1; 388028#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387998#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 387995#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 387993#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 387986#L229-14 assume 0 == isPersonOnFloor_~floor#1; 387959#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387944#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 387942#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 387940#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 387939#L229-16 assume 0 == isPersonOnFloor_~floor#1; 387832#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387826#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 387824#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 387822#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 387821#L229-18 assume 0 == isPersonOnFloor_~floor#1; 387732#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387708#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 387706#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 387704#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 387703#L229-20 assume 0 == isPersonOnFloor_~floor#1; 387605#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387592#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 387590#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 387588#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 387587#L229-22 assume 0 == isPersonOnFloor_~floor#1; 387552#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 387551#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 387549#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 387550#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 387408#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 387404#L185-41 assume { :end_inline_resetCallOnFloor } true; 387402#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 387401#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 387394#L1551-5 assume { :end_inline_resetFloorButton } true; 375891#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 387393#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 387392#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 387391#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 383759#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 383764#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 383762#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 383755#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 383738#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 383736#L1128-2 [2022-07-22 02:26:57,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:57,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1226970014, now seen corresponding path program 1 times [2022-07-22 02:26:57,834 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:57,834 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [207036320] [2022-07-22 02:26:57,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:57,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:57,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:57,859 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:57,860 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:57,860 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [207036320] [2022-07-22 02:26:57,860 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [207036320] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:57,860 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:57,860 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:57,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325947895] [2022-07-22 02:26:57,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:57,861 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:57,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:57,861 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 3 times [2022-07-22 02:26:57,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:57,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522004142] [2022-07-22 02:26:57,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:57,862 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:57,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:57,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:57,898 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:57,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522004142] [2022-07-22 02:26:57,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1522004142] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:57,899 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:57,899 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:57,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115847926] [2022-07-22 02:26:57,899 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:57,900 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:57,900 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:57,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:57,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:57,900 INFO L87 Difference]: Start difference. First operand 15576 states and 28720 transitions. cyclomatic complexity: 13145 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:58,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:58,017 INFO L93 Difference]: Finished difference Result 15576 states and 28716 transitions. [2022-07-22 02:26:58,018 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:26:58,019 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15576 states and 28716 transitions. [2022-07-22 02:26:58,066 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:58,096 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15576 states to 15576 states and 28716 transitions. [2022-07-22 02:26:58,096 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15576 [2022-07-22 02:26:58,103 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15576 [2022-07-22 02:26:58,103 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15576 states and 28716 transitions. [2022-07-22 02:26:58,110 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:58,110 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28716 transitions. [2022-07-22 02:26:58,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15576 states and 28716 transitions. [2022-07-22 02:26:58,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15576 to 15576. [2022-07-22 02:26:58,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15576 states, 15576 states have (on average 1.8436055469953776) internal successors, (28716), 15575 states have internal predecessors, (28716), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:58,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15576 states to 15576 states and 28716 transitions. [2022-07-22 02:26:58,396 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28716 transitions. [2022-07-22 02:26:58,396 INFO L374 stractBuchiCegarLoop]: Abstraction has 15576 states and 28716 transitions. [2022-07-22 02:26:58,396 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-22 02:26:58,396 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15576 states and 28716 transitions. [2022-07-22 02:26:58,424 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:58,424 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:58,424 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:58,427 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:58,427 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:58,428 INFO L752 eck$LassoCheckResult]: Stem: 407287#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 407288#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 407221#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 406977#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 406978#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 407130#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 407671#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 408552#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 406798#L772 assume !(0 == getOrigin_~person#1); 406799#L776 assume !(1 == getOrigin_~person#1); 406477#L780 assume !(2 == getOrigin_~person#1); 406478#L784 assume !(3 == getOrigin_~person#1); 407692#L788 assume !(4 == getOrigin_~person#1); 407899#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 406670#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 406671#L409 assume !(0 == initPersonOnFloor_~floor#1); 407135#L436 assume 1 == initPersonOnFloor_~floor#1; 407136#L437 assume !(0 == initPersonOnFloor_~person#1); 407890#L440 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 407006#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 406617#L201 assume !(0 == callOnFloor_~floorID#1); 406619#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 407797#L213-2 assume { :end_inline_callOnFloor } true; 408642#L553 assume { :end_inline_initPersonOnFloor } true; 408641#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 408640#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 408638#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 408637#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 408636#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 407477#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 406834#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 406836#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 408643#L2330 assume !(0 != timeShift_~tmp___9~2#1); 406204#L2421 assume !(1 == ~doorState~0); 406205#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 407957#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 408343#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 406645#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 407105#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 407106#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 407795#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 408644#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 407001#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 406954#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 407883#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 408384#L2148-2 assume !(1 == ~currentHeading~0); 406431#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 406432#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 406552#L2164-5 assume { :end_inline_continueInDirection } true; 407345#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 407923#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 407284#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 407285#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 407336#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 407501#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 407029#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 407030#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 407833#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 408602#L1128-2 [2022-07-22 02:26:58,428 INFO L754 eck$LassoCheckResult]: Loop: 408602#L1128-2 assume !false; 416640#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 416638#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 416636#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 416635#L1136 assume 1 != cleanup_~tmp___0~2#1; 416634#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 416633#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 416632#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 416631#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 416629#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 416628#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 416627#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 416626#L138-26 assume !(0 == isFloorCalling_~floorID#1); 416623#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 416621#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 416620#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 416608#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 416597#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 416580#L2332-2 assume !(0 != ~persons_0~0); 416577#L2332-3 assume !(0 != ~persons_1~0); 416572#L2346-1 assume !(0 != ~persons_2~0); 416562#L2360-1 assume !(0 != ~persons_3~0); 416556#L2374-1 assume !(0 != ~persons_4~0); 416551#L2388-1 assume !(0 != ~persons_5~0); 416547#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416546#L229-12 assume 0 == isPersonOnFloor_~floor#1; 416536#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 416506#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 416503#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 416501#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416494#L229-14 assume 0 == isPersonOnFloor_~floor#1; 416467#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 416452#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 416450#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 416448#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416447#L229-16 assume 0 == isPersonOnFloor_~floor#1; 416050#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 416044#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 416042#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 416040#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 416038#L229-18 assume 0 == isPersonOnFloor_~floor#1; 416021#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415997#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 415995#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 415993#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415992#L229-20 assume 0 == isPersonOnFloor_~floor#1; 415878#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415859#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 415769#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 415766#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 415726#L229-22 assume 0 == isPersonOnFloor_~floor#1; 415437#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 415430#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 415426#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 415425#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 415420#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 415421#L185-41 assume { :end_inline_resetCallOnFloor } true; 416682#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 416679#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 415362#L1551-5 assume { :end_inline_resetFloorButton } true; 407058#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 416676#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 416675#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 416674#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 416672#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 416673#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 416647#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 416645#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 416643#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 408602#L1128-2 [2022-07-22 02:26:58,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:58,429 INFO L85 PathProgramCache]: Analyzing trace with hash -51503486, now seen corresponding path program 1 times [2022-07-22 02:26:58,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:58,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694199953] [2022-07-22 02:26:58,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:58,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:58,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:58,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:58,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:58,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694199953] [2022-07-22 02:26:58,458 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694199953] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:58,458 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:58,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:58,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1470816092] [2022-07-22 02:26:58,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:58,458 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:58,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:58,459 INFO L85 PathProgramCache]: Analyzing trace with hash -1914458475, now seen corresponding path program 1 times [2022-07-22 02:26:58,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:58,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105271730] [2022-07-22 02:26:58,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:58,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:58,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:58,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:58,489 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:58,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105271730] [2022-07-22 02:26:58,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105271730] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:58,490 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:58,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:58,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1933930652] [2022-07-22 02:26:58,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:58,490 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:58,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:58,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:58,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:58,491 INFO L87 Difference]: Start difference. First operand 15576 states and 28716 transitions. cyclomatic complexity: 13141 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:58,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:58,607 INFO L93 Difference]: Finished difference Result 15576 states and 28712 transitions. [2022-07-22 02:26:58,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:26:58,608 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15576 states and 28712 transitions. [2022-07-22 02:26:58,658 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:58,692 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15576 states to 15576 states and 28712 transitions. [2022-07-22 02:26:58,692 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15576 [2022-07-22 02:26:58,701 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15576 [2022-07-22 02:26:58,701 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15576 states and 28712 transitions. [2022-07-22 02:26:58,712 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:58,713 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28712 transitions. [2022-07-22 02:26:58,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15576 states and 28712 transitions. [2022-07-22 02:26:58,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15576 to 15576. [2022-07-22 02:26:58,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15576 states, 15576 states have (on average 1.8433487416538263) internal successors, (28712), 15575 states have internal predecessors, (28712), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:58,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15576 states to 15576 states and 28712 transitions. [2022-07-22 02:26:58,993 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28712 transitions. [2022-07-22 02:26:58,993 INFO L374 stractBuchiCegarLoop]: Abstraction has 15576 states and 28712 transitions. [2022-07-22 02:26:58,994 INFO L287 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-07-22 02:26:58,994 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15576 states and 28712 transitions. [2022-07-22 02:26:59,026 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:59,027 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:59,027 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:59,030 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:59,030 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:59,030 INFO L752 eck$LassoCheckResult]: Stem: 438453#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 438454#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 438386#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 438143#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 438144#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 438293#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 438824#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 439685#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 437963#L772 assume !(0 == getOrigin_~person#1); 437964#L776 assume !(1 == getOrigin_~person#1); 437642#L780 assume !(2 == getOrigin_~person#1); 437643#L784 assume !(3 == getOrigin_~person#1); 438846#L788 assume !(4 == getOrigin_~person#1); 439053#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 437836#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 437837#L409 assume !(0 == initPersonOnFloor_~floor#1); 438298#L436 assume 1 == initPersonOnFloor_~floor#1; 438299#L437 assume !(0 == initPersonOnFloor_~person#1); 439045#L440 assume !(1 == initPersonOnFloor_~person#1); 438935#L443 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 438172#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 437783#L201 assume !(0 == callOnFloor_~floorID#1); 437785#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 438955#L213-2 assume { :end_inline_callOnFloor } true; 439766#L553 assume { :end_inline_initPersonOnFloor } true; 439765#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 439763#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 439762#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 439761#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 439758#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 438640#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 438000#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 438002#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 439759#L2330 assume !(0 != timeShift_~tmp___9~2#1); 437368#L2421 assume !(1 == ~doorState~0); 437369#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 439108#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 439483#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 437812#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 438269#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 438270#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 438953#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 439767#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 438165#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 438120#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 439037#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 439522#L2148-2 assume !(1 == ~currentHeading~0); 437595#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 437596#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437718#L2164-5 assume { :end_inline_continueInDirection } true; 438511#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 440032#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 438448#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 438449#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 438502#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 437716#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 437717#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 438196#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 438988#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 439269#L1128-2 [2022-07-22 02:26:59,030 INFO L754 eck$LassoCheckResult]: Loop: 439269#L1128-2 assume !false; 438066#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 438067#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 439566#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 439521#L1136 assume 1 != cleanup_~tmp___0~2#1; 438379#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 438380#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 439336#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 439337#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 438385#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 437704#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 437705#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 438532#L138-26 assume !(0 == isFloorCalling_~floorID#1); 439998#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 439995#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 439996#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 446056#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 448287#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 443063#L2332-2 assume !(0 != ~persons_0~0); 448261#L2332-3 assume !(0 != ~persons_1~0); 448256#L2346-1 assume !(0 != ~persons_2~0); 448246#L2360-1 assume !(0 != ~persons_3~0); 448240#L2374-1 assume !(0 != ~persons_4~0); 448235#L2388-1 assume !(0 != ~persons_5~0); 446897#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 446896#L229-12 assume 0 == isPersonOnFloor_~floor#1; 446886#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 446856#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 446853#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 446851#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 446844#L229-14 assume 0 == isPersonOnFloor_~floor#1; 446817#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 446802#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 446800#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 446798#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 446796#L229-16 assume 0 == isPersonOnFloor_~floor#1; 446706#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 446701#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 446693#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 446690#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 446682#L229-18 assume 0 == isPersonOnFloor_~floor#1; 446672#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 446649#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 446647#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 446648#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 450566#L229-20 assume 0 == isPersonOnFloor_~floor#1; 450281#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 450268#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 450266#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 450264#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 450263#L229-22 assume 0 == isPersonOnFloor_~floor#1; 446396#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 446394#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 446197#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 446154#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 446147#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 438774#L185-41 assume { :end_inline_resetCallOnFloor } true; 438619#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 438265#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 437497#L1551-5 assume { :end_inline_resetFloorButton } true; 438223#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 438252#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 437848#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 437849#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 438943#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 438597#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 438598#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 437460#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 437958#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 439269#L1128-2 [2022-07-22 02:26:59,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:59,031 INFO L85 PathProgramCache]: Analyzing trace with hash 746185917, now seen corresponding path program 1 times [2022-07-22 02:26:59,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:59,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841228314] [2022-07-22 02:26:59,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:59,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:59,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:59,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:59,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:59,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841228314] [2022-07-22 02:26:59,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841228314] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:59,060 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:59,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:59,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390230746] [2022-07-22 02:26:59,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:59,061 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:59,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:59,061 INFO L85 PathProgramCache]: Analyzing trace with hash -1914458475, now seen corresponding path program 2 times [2022-07-22 02:26:59,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:59,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2048115978] [2022-07-22 02:26:59,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:59,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:59,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:59,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:59,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:59,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2048115978] [2022-07-22 02:26:59,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2048115978] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:59,094 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:59,094 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:59,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036286935] [2022-07-22 02:26:59,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:59,094 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:59,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:59,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:59,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:59,095 INFO L87 Difference]: Start difference. First operand 15576 states and 28712 transitions. cyclomatic complexity: 13137 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:59,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:59,204 INFO L93 Difference]: Finished difference Result 15576 states and 28708 transitions. [2022-07-22 02:26:59,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:26:59,204 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15576 states and 28708 transitions. [2022-07-22 02:26:59,253 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:59,285 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15576 states to 15576 states and 28708 transitions. [2022-07-22 02:26:59,285 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15576 [2022-07-22 02:26:59,293 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15576 [2022-07-22 02:26:59,293 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15576 states and 28708 transitions. [2022-07-22 02:26:59,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:59,303 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28708 transitions. [2022-07-22 02:26:59,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15576 states and 28708 transitions. [2022-07-22 02:26:59,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15576 to 15576. [2022-07-22 02:26:59,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15576 states, 15576 states have (on average 1.8430919363122753) internal successors, (28708), 15575 states have internal predecessors, (28708), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:59,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15576 states to 15576 states and 28708 transitions. [2022-07-22 02:26:59,439 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15576 states and 28708 transitions. [2022-07-22 02:26:59,439 INFO L374 stractBuchiCegarLoop]: Abstraction has 15576 states and 28708 transitions. [2022-07-22 02:26:59,439 INFO L287 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-07-22 02:26:59,439 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15576 states and 28708 transitions. [2022-07-22 02:26:59,572 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:59,572 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:26:59,572 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:26:59,576 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:59,576 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:26:59,576 INFO L752 eck$LassoCheckResult]: Stem: 469619#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 469620#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 469554#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 469308#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 469309#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 469462#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 469995#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 470842#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 469127#L772 assume !(0 == getOrigin_~person#1); 469128#L776 assume !(1 == getOrigin_~person#1); 468806#L780 assume !(2 == getOrigin_~person#1); 468807#L784 assume !(3 == getOrigin_~person#1); 470018#L788 assume !(4 == getOrigin_~person#1); 470216#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 469000#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 469001#L409 assume !(0 == initPersonOnFloor_~floor#1); 469467#L436 assume !(1 == initPersonOnFloor_~floor#1); 469469#L463 assume !(2 == initPersonOnFloor_~floor#1); 470224#L490 assume !(3 == initPersonOnFloor_~floor#1); 470226#L517 assume !(4 == initPersonOnFloor_~floor#1); 469338#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 468948#L201 assume !(0 == callOnFloor_~floorID#1); 468950#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 470123#L213-2 assume { :end_inline_callOnFloor } true; 470919#L553 assume { :end_inline_initPersonOnFloor } true; 470918#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 470916#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 470915#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 470914#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 470912#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 469808#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 469164#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 469166#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 470913#L2330 assume !(0 != timeShift_~tmp___9~2#1); 468534#L2421 assume !(1 == ~doorState~0); 468535#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 470271#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 470641#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 468975#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 469437#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 469438#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 470121#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 470920#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 469331#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 469285#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 470201#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 470684#L2148-2 assume !(1 == ~currentHeading~0); 468760#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 468761#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 468882#L2164-5 assume { :end_inline_continueInDirection } true; 469677#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 470237#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 469614#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 469615#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 471289#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 471284#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 471272#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 471258#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 471254#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 471255#L1128-2 [2022-07-22 02:26:59,576 INFO L754 eck$LassoCheckResult]: Loop: 471255#L1128-2 assume !false; 474511#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 474510#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 474509#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 474508#L1136 assume 1 != cleanup_~tmp___0~2#1; 474507#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 474506#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 474505#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 474503#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 474504#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 476394#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 476393#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 476392#L138-26 assume !(0 == isFloorCalling_~floorID#1); 476389#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 476383#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 476379#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 476377#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 476376#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 476351#L2332-2 assume !(0 != ~persons_0~0); 476344#L2332-3 assume !(0 != ~persons_1~0); 476338#L2346-1 assume !(0 != ~persons_2~0); 476328#L2360-1 assume !(0 != ~persons_3~0); 476322#L2374-1 assume !(0 != ~persons_4~0); 476317#L2388-1 assume !(0 != ~persons_5~0); 476313#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 476312#L229-12 assume 0 == isPersonOnFloor_~floor#1; 476302#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 476272#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 476269#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 476267#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 476260#L229-14 assume 0 == isPersonOnFloor_~floor#1; 476233#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 476218#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 476216#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 476214#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 476213#L229-16 assume 0 == isPersonOnFloor_~floor#1; 475124#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 475118#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 475116#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 475114#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 475113#L229-18 assume 0 == isPersonOnFloor_~floor#1; 475100#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 475077#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 475075#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 475076#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 476057#L229-20 assume 0 == isPersonOnFloor_~floor#1; 476027#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 476014#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 476012#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 476010#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 476009#L229-22 assume 0 == isPersonOnFloor_~floor#1; 475974#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 475973#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 475769#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 475767#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 474573#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 474568#L185-41 assume { :end_inline_resetCallOnFloor } true; 474551#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 474550#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 474535#L1551-5 assume { :end_inline_resetFloorButton } true; 474532#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 474531#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 474530#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 474529#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 474515#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 474520#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 474518#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 474513#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 474512#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 471255#L1128-2 [2022-07-22 02:26:59,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:59,577 INFO L85 PathProgramCache]: Analyzing trace with hash 1369364541, now seen corresponding path program 1 times [2022-07-22 02:26:59,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:59,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683576637] [2022-07-22 02:26:59,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:59,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:59,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:59,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:59,603 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:59,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683576637] [2022-07-22 02:26:59,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683576637] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:59,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:59,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:26:59,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167221433] [2022-07-22 02:26:59,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:59,604 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:26:59,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:26:59,605 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 4 times [2022-07-22 02:26:59,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:26:59,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120746524] [2022-07-22 02:26:59,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:26:59,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:26:59,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:26:59,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:26:59,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:26:59,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120746524] [2022-07-22 02:26:59,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120746524] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:26:59,636 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:26:59,636 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:26:59,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355270172] [2022-07-22 02:26:59,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:26:59,637 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:26:59,637 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:26:59,637 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:26:59,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:26:59,638 INFO L87 Difference]: Start difference. First operand 15576 states and 28708 transitions. cyclomatic complexity: 13133 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:26:59,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:26:59,709 INFO L93 Difference]: Finished difference Result 15555 states and 28674 transitions. [2022-07-22 02:26:59,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:26:59,710 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15555 states and 28674 transitions. [2022-07-22 02:26:59,772 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:26:59,815 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15555 states to 15555 states and 28674 transitions. [2022-07-22 02:26:59,815 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15555 [2022-07-22 02:26:59,827 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15555 [2022-07-22 02:26:59,827 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15555 states and 28674 transitions. [2022-07-22 02:26:59,840 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:26:59,840 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28674 transitions. [2022-07-22 02:26:59,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15555 states and 28674 transitions. [2022-07-22 02:26:59,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15555 to 15555. [2022-07-22 02:26:59,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15555 states, 15555 states have (on average 1.8433944069431052) internal successors, (28674), 15554 states have internal predecessors, (28674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:00,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15555 states to 15555 states and 28674 transitions. [2022-07-22 02:27:00,001 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28674 transitions. [2022-07-22 02:27:00,001 INFO L374 stractBuchiCegarLoop]: Abstraction has 15555 states and 28674 transitions. [2022-07-22 02:27:00,001 INFO L287 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-07-22 02:27:00,002 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15555 states and 28674 transitions. [2022-07-22 02:27:00,047 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:00,048 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:00,048 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:00,052 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:00,052 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:00,052 INFO L752 eck$LassoCheckResult]: Stem: 500758#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 500759#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 500691#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 500450#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 500451#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 500600#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 501126#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 501936#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 500269#L772 assume !(0 == getOrigin_~person#1); 500270#L776 assume !(1 == getOrigin_~person#1); 499951#L780 assume !(2 == getOrigin_~person#1); 499952#L784 assume !(3 == getOrigin_~person#1); 501149#L788 assume !(4 == getOrigin_~person#1); 501335#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 500142#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 500143#L409 assume !(0 == initPersonOnFloor_~floor#1); 500605#L436 assume 1 == initPersonOnFloor_~floor#1; 500606#L437 assume !(0 == initPersonOnFloor_~person#1); 501327#L440 assume !(1 == initPersonOnFloor_~person#1); 501228#L443 assume !(2 == initPersonOnFloor_~person#1); 501229#L446 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 500892#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 500091#L201 assume !(0 == callOnFloor_~floorID#1); 500093#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 501246#L213-2 assume { :end_inline_callOnFloor } true; 502015#L553 assume { :end_inline_initPersonOnFloor } true; 502014#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 502012#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 502011#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 502010#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 502007#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 500943#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 500307#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 500309#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 502008#L2330 assume !(0 != timeShift_~tmp___9~2#1); 499679#L2421 assume !(1 == ~doorState~0); 499680#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 501387#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 501749#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 500118#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 500576#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 500577#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 501244#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 502016#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 500472#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 500427#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 501320#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 501788#L2148-2 assume !(1 == ~currentHeading~0); 499905#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 499906#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 500026#L2164-5 assume { :end_inline_continueInDirection } true; 500815#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 508271#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 500753#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 500754#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 514718#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 514717#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 514707#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 514694#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 514691#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 514690#L1128-2 [2022-07-22 02:27:00,053 INFO L754 eck$LassoCheckResult]: Loop: 514690#L1128-2 assume !false; 514689#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 514688#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 514687#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 514686#L1136 assume 1 != cleanup_~tmp___0~2#1; 514685#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 514683#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 514675#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 514674#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 500687#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 500012#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 500013#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 500835#L138-26 assume !(0 == isFloorCalling_~floorID#1); 501202#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 499921#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 500149#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 501403#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 515125#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 502035#L2332-2 assume !(0 != ~persons_0~0); 501763#L2332-3 assume !(0 != ~persons_1~0); 501524#L2346-1 assume !(0 != ~persons_2~0); 512750#L2360-1 assume !(0 != ~persons_3~0); 512744#L2374-1 assume !(0 != ~persons_4~0); 512739#L2388-1 assume !(0 != ~persons_5~0); 512735#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 512733#L229-12 assume 0 == isPersonOnFloor_~floor#1; 512722#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 512696#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 512695#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 500999#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 501000#L229-14 assume 0 == isPersonOnFloor_~floor#1; 501645#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 499877#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 500785#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 512658#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 513214#L229-16 assume 0 == isPersonOnFloor_~floor#1; 513183#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 513178#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 513176#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 513177#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 513351#L229-18 assume 0 == isPersonOnFloor_~floor#1; 513338#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 513315#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 513313#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 513314#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 501935#L229-20 assume 0 == isPersonOnFloor_~floor#1; 501853#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 499677#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 500595#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 500596#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 513102#L229-22 assume 0 == isPersonOnFloor_~floor#1; 513067#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 513066#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 513065#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 500267#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 500268#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 501079#L185-41 assume { :end_inline_resetCallOnFloor } true; 514757#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 514742#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 511579#L1551-5 assume { :end_inline_resetFloorButton } true; 514728#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 514727#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 514726#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 514725#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 514723#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 514724#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 514695#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 514693#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 514692#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 514690#L1128-2 [2022-07-22 02:27:00,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:00,053 INFO L85 PathProgramCache]: Analyzing trace with hash -1577280963, now seen corresponding path program 1 times [2022-07-22 02:27:00,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:00,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1805759951] [2022-07-22 02:27:00,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:00,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:00,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:00,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:00,079 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:00,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1805759951] [2022-07-22 02:27:00,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1805759951] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:00,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:00,080 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:27:00,080 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077117549] [2022-07-22 02:27:00,080 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:00,080 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:00,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:00,081 INFO L85 PathProgramCache]: Analyzing trace with hash -1914458475, now seen corresponding path program 3 times [2022-07-22 02:27:00,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:00,081 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2014967353] [2022-07-22 02:27:00,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:00,081 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:00,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:00,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:00,110 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:00,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2014967353] [2022-07-22 02:27:00,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2014967353] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:00,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:00,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:00,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907544581] [2022-07-22 02:27:00,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:00,111 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:00,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:00,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:27:00,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:27:00,112 INFO L87 Difference]: Start difference. First operand 15555 states and 28674 transitions. cyclomatic complexity: 13120 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:00,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:00,337 INFO L93 Difference]: Finished difference Result 15555 states and 28673 transitions. [2022-07-22 02:27:00,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:27:00,338 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15555 states and 28673 transitions. [2022-07-22 02:27:00,385 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:00,411 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15555 states to 15555 states and 28673 transitions. [2022-07-22 02:27:00,412 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15555 [2022-07-22 02:27:00,418 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15555 [2022-07-22 02:27:00,418 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15555 states and 28673 transitions. [2022-07-22 02:27:00,425 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:00,425 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28673 transitions. [2022-07-22 02:27:00,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15555 states and 28673 transitions. [2022-07-22 02:27:00,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15555 to 15555. [2022-07-22 02:27:00,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15555 states, 15555 states have (on average 1.843330118932819) internal successors, (28673), 15554 states have internal predecessors, (28673), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:00,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15555 states to 15555 states and 28673 transitions. [2022-07-22 02:27:00,534 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28673 transitions. [2022-07-22 02:27:00,534 INFO L374 stractBuchiCegarLoop]: Abstraction has 15555 states and 28673 transitions. [2022-07-22 02:27:00,534 INFO L287 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-07-22 02:27:00,534 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15555 states and 28673 transitions. [2022-07-22 02:27:00,565 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:00,565 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:00,565 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:00,568 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:00,568 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:00,568 INFO L752 eck$LassoCheckResult]: Stem: 531892#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 531893#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 531821#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 531575#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 531576#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 531730#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 532275#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 533137#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 531395#L772 assume !(0 == getOrigin_~person#1); 531396#L776 assume !(1 == getOrigin_~person#1); 531075#L780 assume !(2 == getOrigin_~person#1); 531076#L784 assume !(3 == getOrigin_~person#1); 532296#L788 assume !(4 == getOrigin_~person#1); 532496#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 531269#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 531270#L409 assume !(0 == initPersonOnFloor_~floor#1); 531735#L436 assume 1 == initPersonOnFloor_~floor#1; 531736#L437 assume !(0 == initPersonOnFloor_~person#1); 532487#L440 assume !(1 == initPersonOnFloor_~person#1); 532382#L443 assume !(2 == initPersonOnFloor_~person#1); 532383#L446 assume !(3 == initPersonOnFloor_~person#1); 532029#L449 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 532030#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 531216#L201 assume !(0 == callOnFloor_~floorID#1); 531218#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 532404#L213-2 assume { :end_inline_callOnFloor } true; 533222#L553 assume { :end_inline_initPersonOnFloor } true; 533221#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 533219#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 533218#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 533217#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 533215#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 532082#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 531432#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 531434#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 533216#L2330 assume !(0 != timeShift_~tmp___9~2#1); 530803#L2421 assume !(1 == ~doorState~0); 530804#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 532549#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 532921#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 531244#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 531706#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 531707#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 532402#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 533223#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 531595#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 531552#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 532479#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 532965#L2148-2 assume !(1 == ~currentHeading~0); 531029#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 531030#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 531151#L2164-5 assume { :end_inline_continueInDirection } true; 531949#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 532516#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 531887#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 531888#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 531939#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 532108#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 535801#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 535798#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 535796#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 535793#L1128-2 [2022-07-22 02:27:00,568 INFO L754 eck$LassoCheckResult]: Loop: 535793#L1128-2 assume !false; 535789#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 535784#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 535355#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 535354#L1136 assume 1 != cleanup_~tmp___0~2#1; 535353#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 535351#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 535350#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 535349#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 531817#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 531137#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 531138#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 531969#L138-26 assume !(0 == isFloorCalling_~floorID#1); 535933#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 535859#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 535838#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 532726#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 531135#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 531136#L2332-2 assume !(0 != ~persons_0~0); 531174#L2332-3 assume !(0 != ~persons_1~0); 532689#L2346-1 assume !(0 != ~persons_2~0); 530793#L2360-1 assume !(0 != ~persons_3~0); 532242#L2374-1 assume !(0 != ~persons_4~0); 531795#L2388-1 assume !(0 != ~persons_5~0); 538182#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 538181#L229-12 assume 0 == isPersonOnFloor_~floor#1; 537115#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 537085#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 537082#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 537080#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 537073#L229-14 assume 0 == isPersonOnFloor_~floor#1; 537046#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 537031#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 537029#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 537027#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 537026#L229-16 assume 0 == isPersonOnFloor_~floor#1; 536920#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 536914#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 536912#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 536910#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 536909#L229-18 assume 0 == isPersonOnFloor_~floor#1; 536821#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 536797#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 536795#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 536793#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 536792#L229-20 assume 0 == isPersonOnFloor_~floor#1; 536467#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 536454#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 536452#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 536450#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 536449#L229-22 assume 0 == isPersonOnFloor_~floor#1; 536353#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 536346#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 536253#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 536249#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 536245#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 536241#L185-41 assume { :end_inline_resetCallOnFloor } true; 536240#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 536239#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 535961#L1551-5 assume { :end_inline_resetFloorButton } true; 535957#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 535936#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 535861#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 535830#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 535806#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 535811#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 535809#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 535804#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 535797#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 535793#L1128-2 [2022-07-22 02:27:00,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:00,569 INFO L85 PathProgramCache]: Analyzing trace with hash -1872344808, now seen corresponding path program 1 times [2022-07-22 02:27:00,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:00,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788177225] [2022-07-22 02:27:00,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:00,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:00,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:00,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:00,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:00,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1788177225] [2022-07-22 02:27:00,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1788177225] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:00,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:00,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:27:00,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324483534] [2022-07-22 02:27:00,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:00,598 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:00,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:00,599 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 5 times [2022-07-22 02:27:00,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:00,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1138677614] [2022-07-22 02:27:00,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:00,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:00,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:00,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:00,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:00,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1138677614] [2022-07-22 02:27:00,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1138677614] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:00,631 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:00,631 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:00,631 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011544404] [2022-07-22 02:27:00,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:00,632 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:00,632 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:00,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:27:00,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:27:00,633 INFO L87 Difference]: Start difference. First operand 15555 states and 28673 transitions. cyclomatic complexity: 13119 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:00,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:00,713 INFO L93 Difference]: Finished difference Result 15555 states and 28672 transitions. [2022-07-22 02:27:00,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 02:27:00,714 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15555 states and 28672 transitions. [2022-07-22 02:27:00,867 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:00,890 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15555 states to 15555 states and 28672 transitions. [2022-07-22 02:27:00,890 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15555 [2022-07-22 02:27:00,896 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15555 [2022-07-22 02:27:00,896 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15555 states and 28672 transitions. [2022-07-22 02:27:00,903 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:00,903 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28672 transitions. [2022-07-22 02:27:00,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15555 states and 28672 transitions. [2022-07-22 02:27:00,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15555 to 15555. [2022-07-22 02:27:00,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15555 states, 15555 states have (on average 1.843265830922533) internal successors, (28672), 15554 states have internal predecessors, (28672), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:01,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15555 states to 15555 states and 28672 transitions. [2022-07-22 02:27:01,013 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28672 transitions. [2022-07-22 02:27:01,013 INFO L374 stractBuchiCegarLoop]: Abstraction has 15555 states and 28672 transitions. [2022-07-22 02:27:01,013 INFO L287 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-07-22 02:27:01,013 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15555 states and 28672 transitions. [2022-07-22 02:27:01,041 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:01,041 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:01,041 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:01,044 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:01,044 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:01,044 INFO L752 eck$LassoCheckResult]: Stem: 563015#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 563016#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 562947#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562706#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 562707#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 562858#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 563386#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 564222#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 562523#L772 assume !(0 == getOrigin_~person#1); 562524#L776 assume !(1 == getOrigin_~person#1); 562200#L780 assume !(2 == getOrigin_~person#1); 562201#L784 assume !(3 == getOrigin_~person#1); 563408#L788 assume !(4 == getOrigin_~person#1); 563598#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 562395#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 562396#L409 assume !(0 == initPersonOnFloor_~floor#1); 562863#L436 assume 1 == initPersonOnFloor_~floor#1; 562864#L437 assume !(0 == initPersonOnFloor_~person#1); 563591#L440 assume !(1 == initPersonOnFloor_~person#1); 563492#L443 assume !(2 == initPersonOnFloor_~person#1); 563493#L446 assume !(3 == initPersonOnFloor_~person#1); 563149#L449 assume !(4 == initPersonOnFloor_~person#1); 563150#L452 assume !(5 == initPersonOnFloor_~person#1); 563619#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 562343#L201 assume !(0 == callOnFloor_~floorID#1); 562345#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 563510#L213-2 assume { :end_inline_callOnFloor } true; 564293#L553 assume { :end_inline_initPersonOnFloor } true; 564292#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 564290#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 564289#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 564288#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 564286#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 563202#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 562561#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 562563#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 564287#L2330 assume !(0 != timeShift_~tmp___9~2#1); 561927#L2421 assume !(1 == ~doorState~0); 561928#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 563653#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 564021#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 562371#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 562833#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 562834#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 563508#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 564294#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 562726#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 562683#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 563584#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 564062#L2148-2 assume !(1 == ~currentHeading~0); 562153#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 562154#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 562276#L2164-5 assume { :end_inline_continueInDirection } true; 563070#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 563620#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 563010#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 563011#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 563061#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 562274#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 562275#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 562758#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 563541#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 564267#L1128-2 [2022-07-22 02:27:01,045 INFO L754 eck$LassoCheckResult]: Loop: 564267#L1128-2 assume !false; 570512#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 570407#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 570402#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 570383#L1136 assume 1 != cleanup_~tmp___0~2#1; 570374#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 570366#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 570331#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 570321#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 564246#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 574433#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 570661#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 570476#L138-26 assume !(0 == isFloorCalling_~floorID#1); 570404#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 570401#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 570382#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 570239#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 575177#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 564314#L2332-2 assume !(0 != ~persons_0~0); 575158#L2332-3 assume !(0 != ~persons_1~0); 575153#L2346-1 assume !(0 != ~persons_2~0); 575143#L2360-1 assume !(0 != ~persons_3~0); 575137#L2374-1 assume !(0 != ~persons_4~0); 575132#L2388-1 assume !(0 != ~persons_5~0); 575128#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 575127#L229-12 assume 0 == isPersonOnFloor_~floor#1; 575117#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 575087#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 575084#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 575082#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 575075#L229-14 assume 0 == isPersonOnFloor_~floor#1; 575048#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 575033#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 575031#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 575029#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 575028#L229-16 assume 0 == isPersonOnFloor_~floor#1; 574863#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 574857#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 574855#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 574853#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 574852#L229-18 assume 0 == isPersonOnFloor_~floor#1; 574773#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 574749#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 574747#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 574745#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 574744#L229-20 assume 0 == isPersonOnFloor_~floor#1; 574684#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 574671#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 574669#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 574667#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 574666#L229-22 assume 0 == isPersonOnFloor_~floor#1; 574629#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 574628#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 574626#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 574627#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 574482#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 574478#L185-41 assume { :end_inline_resetCallOnFloor } true; 574476#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 574475#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 574468#L1551-5 assume { :end_inline_resetFloorButton } true; 562784#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 574467#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 574466#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 574465#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 574463#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 574464#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 574450#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 574446#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 574444#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 564267#L1128-2 [2022-07-22 02:27:01,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:01,045 INFO L85 PathProgramCache]: Analyzing trace with hash -788264010, now seen corresponding path program 1 times [2022-07-22 02:27:01,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:01,045 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1164794965] [2022-07-22 02:27:01,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:01,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:01,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:01,068 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:01,068 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:01,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1164794965] [2022-07-22 02:27:01,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1164794965] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:01,069 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:01,069 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:27:01,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1346497449] [2022-07-22 02:27:01,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:01,070 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:01,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:01,070 INFO L85 PathProgramCache]: Analyzing trace with hash -1914458475, now seen corresponding path program 4 times [2022-07-22 02:27:01,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:01,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289587112] [2022-07-22 02:27:01,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:01,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:01,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:01,098 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:01,098 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:01,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289587112] [2022-07-22 02:27:01,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289587112] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:01,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:01,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:01,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [456376216] [2022-07-22 02:27:01,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:01,099 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:01,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:01,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:27:01,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:27:01,100 INFO L87 Difference]: Start difference. First operand 15555 states and 28672 transitions. cyclomatic complexity: 13118 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:01,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:01,162 INFO L93 Difference]: Finished difference Result 15555 states and 28671 transitions. [2022-07-22 02:27:01,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:27:01,163 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15555 states and 28671 transitions. [2022-07-22 02:27:01,205 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:01,233 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15555 states to 15555 states and 28671 transitions. [2022-07-22 02:27:01,233 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15555 [2022-07-22 02:27:01,240 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15555 [2022-07-22 02:27:01,240 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15555 states and 28671 transitions. [2022-07-22 02:27:01,247 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:01,248 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28671 transitions. [2022-07-22 02:27:01,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15555 states and 28671 transitions. [2022-07-22 02:27:01,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15555 to 15555. [2022-07-22 02:27:01,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15555 states, 15555 states have (on average 1.8432015429122468) internal successors, (28671), 15554 states have internal predecessors, (28671), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:01,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15555 states to 15555 states and 28671 transitions. [2022-07-22 02:27:01,528 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15555 states and 28671 transitions. [2022-07-22 02:27:01,528 INFO L374 stractBuchiCegarLoop]: Abstraction has 15555 states and 28671 transitions. [2022-07-22 02:27:01,528 INFO L287 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-07-22 02:27:01,528 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15555 states and 28671 transitions. [2022-07-22 02:27:01,562 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12320 [2022-07-22 02:27:01,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:01,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:01,566 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:01,566 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:01,567 INFO L752 eck$LassoCheckResult]: Stem: 594137#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 594138#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 594070#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 593825#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 593826#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 593979#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 594519#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 595391#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 593645#L772 assume !(0 == getOrigin_~person#1); 593646#L776 assume !(1 == getOrigin_~person#1); 593322#L780 assume !(2 == getOrigin_~person#1); 593323#L784 assume !(3 == getOrigin_~person#1); 594541#L788 assume !(4 == getOrigin_~person#1); 594737#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 593517#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 593518#L409 assume !(0 == initPersonOnFloor_~floor#1); 593984#L436 assume 1 == initPersonOnFloor_~floor#1; 593985#L437 assume !(0 == initPersonOnFloor_~person#1); 594730#L440 assume !(1 == initPersonOnFloor_~person#1); 594626#L443 assume !(2 == initPersonOnFloor_~person#1); 594627#L446 assume !(3 == initPersonOnFloor_~person#1); 594276#L449 assume !(4 == initPersonOnFloor_~person#1); 594277#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 594757#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 593465#L201 assume !(0 == callOnFloor_~floorID#1); 593467#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 594647#L213-2 assume { :end_inline_callOnFloor } true; 595491#L553 assume { :end_inline_initPersonOnFloor } true; 595490#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 595488#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 595487#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 595486#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 595484#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 594328#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 593682#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 593684#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 595485#L2330 assume !(0 != timeShift_~tmp___9~2#1); 593048#L2421 assume !(1 == ~doorState~0); 593049#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 594792#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 595177#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 593492#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 593954#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 593955#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 594645#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 595492#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 593845#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 593802#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 594721#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 595220#L2148-2 assume !(1 == ~currentHeading~0); 593275#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 593276#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 593398#L2164-5 assume { :end_inline_continueInDirection } true; 594195#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 601257#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 601256#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 601255#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 601253#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 601250#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 601243#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 601239#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 601237#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 601234#L1128-2 [2022-07-22 02:27:01,567 INFO L754 eck$LassoCheckResult]: Loop: 601234#L1128-2 assume !false; 601162#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 599280#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 599279#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 599278#L1136 assume 1 != cleanup_~tmp___0~2#1; 599277#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 599276#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 599275#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 599273#L1676 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 599274#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 607925#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 607924#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 607923#L138-26 assume !(0 == isFloorCalling_~floorID#1); 607920#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 607918#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 607904#L2181-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 607902#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 607895#L2330-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 607876#L2332-2 assume !(0 != ~persons_0~0); 607874#L2332-3 assume !(0 != ~persons_1~0); 595430#L2346-1 assume !(0 != ~persons_2~0); 593038#L2360-1 assume !(0 != ~persons_3~0); 594486#L2374-1 assume !(0 != ~persons_4~0); 594043#L2388-1 assume !(0 != ~persons_5~0); 594553#L2402-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 594230#L229-12 assume 0 == isPersonOnFloor_~floor#1; 594231#L230-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 593265#L401-6 processWaitingOnFloor_#t~ret47#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret47#1;havoc processWaitingOnFloor_#t~ret47#1; 593252#L2231-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 593254#L2231-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 594385#L229-14 assume 0 == isPersonOnFloor_~floor#1; 595065#L230-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 593247#L401-7 processWaitingOnFloor_#t~ret49#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret49#1;havoc processWaitingOnFloor_#t~ret49#1; 594165#L2244-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 593031#L2244-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 593032#L229-16 assume 0 == isPersonOnFloor_~floor#1; 593773#L230-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 605089#L401-8 processWaitingOnFloor_#t~ret51#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret51#1;havoc processWaitingOnFloor_#t~ret51#1; 605087#L2257-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 605085#L2257-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 605084#L229-18 assume 0 == isPersonOnFloor_~floor#1; 604997#L230-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 604973#L401-9 processWaitingOnFloor_#t~ret53#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret53#1;havoc processWaitingOnFloor_#t~ret53#1; 604971#L2270-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 604969#L2270-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 604968#L229-20 assume 0 == isPersonOnFloor_~floor#1; 604949#L230-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 604939#L401-10 processWaitingOnFloor_#t~ret55#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret55#1;havoc processWaitingOnFloor_#t~ret55#1; 604938#L2283-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 595101#L2283-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~1#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~1#1; 595102#L229-22 assume 0 == isPersonOnFloor_~floor#1; 593156#L230-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~1#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; 593157#L401-11 processWaitingOnFloor_#t~ret57#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret57#1;havoc processWaitingOnFloor_#t~ret57#1; 594658#L2296-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 593643#L2296-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 593644#L173-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 604365#L185-41 assume { :end_inline_resetCallOnFloor } true; 604363#L2309-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 604360#L1539-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 604277#L1551-5 assume { :end_inline_resetFloorButton } true; 604273#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 604271#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 604269#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 604267#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 601263#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 601268#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 601266#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 601259#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 601238#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 601234#L1128-2 [2022-07-22 02:27:01,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:01,568 INFO L85 PathProgramCache]: Analyzing trace with hash 583543288, now seen corresponding path program 1 times [2022-07-22 02:27:01,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:01,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [958392021] [2022-07-22 02:27:01,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:01,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:01,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:01,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:01,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:01,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [958392021] [2022-07-22 02:27:01,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [958392021] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:01,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:01,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 02:27:01,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511874133] [2022-07-22 02:27:01,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:01,598 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:01,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:01,599 INFO L85 PathProgramCache]: Analyzing trace with hash -1424331177, now seen corresponding path program 6 times [2022-07-22 02:27:01,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:01,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167723279] [2022-07-22 02:27:01,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:01,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:01,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:01,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:01,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:01,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167723279] [2022-07-22 02:27:01,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167723279] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:01,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:01,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:01,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [427500890] [2022-07-22 02:27:01,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:01,640 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:01,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:01,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:27:01,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:27:01,641 INFO L87 Difference]: Start difference. First operand 15555 states and 28671 transitions. cyclomatic complexity: 13117 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 2 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:01,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:01,723 INFO L93 Difference]: Finished difference Result 15778 states and 29012 transitions. [2022-07-22 02:27:01,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:27:01,724 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15778 states and 29012 transitions. [2022-07-22 02:27:01,775 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12543 [2022-07-22 02:27:01,807 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15778 states to 15778 states and 29012 transitions. [2022-07-22 02:27:01,808 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15778 [2022-07-22 02:27:01,816 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15778 [2022-07-22 02:27:01,816 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15778 states and 29012 transitions. [2022-07-22 02:27:01,826 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:01,826 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15778 states and 29012 transitions. [2022-07-22 02:27:01,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15778 states and 29012 transitions. [2022-07-22 02:27:01,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15778 to 15747. [2022-07-22 02:27:01,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15747 states, 15747 states have (on average 1.840350542960564) internal successors, (28980), 15746 states have internal predecessors, (28980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:01,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15747 states to 15747 states and 28980 transitions. [2022-07-22 02:27:01,965 INFO L392 hiAutomatonCegarLoop]: Abstraction has 15747 states and 28980 transitions. [2022-07-22 02:27:01,965 INFO L374 stractBuchiCegarLoop]: Abstraction has 15747 states and 28980 transitions. [2022-07-22 02:27:01,965 INFO L287 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-07-22 02:27:01,965 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15747 states and 28980 transitions. [2022-07-22 02:27:02,003 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12512 [2022-07-22 02:27:02,003 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:02,003 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:02,006 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:02,006 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:02,006 INFO L752 eck$LassoCheckResult]: Stem: 625475#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 625476#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 625409#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 625163#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 625164#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 625318#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 625845#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 626691#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 624984#L772 assume !(0 == getOrigin_~person#1); 624985#L776 assume !(1 == getOrigin_~person#1); 624665#L780 assume !(2 == getOrigin_~person#1); 624666#L784 assume !(3 == getOrigin_~person#1); 625866#L788 assume !(4 == getOrigin_~person#1); 626054#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 624857#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 624858#L409 assume !(0 == initPersonOnFloor_~floor#1); 625324#L436 assume 1 == initPersonOnFloor_~floor#1; 625325#L437 assume !(0 == initPersonOnFloor_~person#1); 626047#L440 assume !(1 == initPersonOnFloor_~person#1); 625947#L443 assume !(2 == initPersonOnFloor_~person#1); 625948#L446 assume !(3 == initPersonOnFloor_~person#1); 625612#L449 assume !(4 == initPersonOnFloor_~person#1); 625613#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 626075#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 624806#L201 assume !(0 == callOnFloor_~floorID#1); 624808#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 625965#L213-2 assume { :end_inline_callOnFloor } true; 626780#L553 assume { :end_inline_initPersonOnFloor } true; 626779#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 626777#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 626776#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 626775#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 626772#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 625662#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 625020#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 625022#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 626773#L2330 assume !(0 != timeShift_~tmp___9~2#1); 624392#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 624393#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 626108#L1772 assume !(1 == stopRequestedInDirection_~dir#1); 626478#L1941 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 624833#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 625294#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 625295#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 625963#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 626781#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 625183#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 625140#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 626038#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 626522#L2148-2 assume !(1 == ~currentHeading~0); 624619#L2158-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 624620#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 624740#L2164-5 assume { :end_inline_continueInDirection } true; 625533#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 627251#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 627250#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 627249#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 627247#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 627244#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 627237#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 627233#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 627230#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 627231#L1128-2 [2022-07-22 02:27:02,007 INFO L754 eck$LassoCheckResult]: Loop: 627231#L1128-2 assume !false; 627222#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 627223#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 627217#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 627218#L1136 assume 1 != cleanup_~tmp___0~2#1; 627210#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 627211#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 627206#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 627207#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 626901#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 626902#L138-22 assume !(0 == isFloorCalling_~floorID#1); 626897#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 626895#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 626872#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 626857#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 626858#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 627537#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 626848#L138-26 assume !(0 == isFloorCalling_~floorID#1); 626849#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 626841#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 626842#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 626832#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 626833#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 626810#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 626811#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 626803#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 626801#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 626800#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 626798#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 626796#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 626794#L1941-2 assume !(0 == ~currentFloorID~0); 626791#L1947-2 assume ~currentFloorID~0 > 0; 626789#L1948-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 626790#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 626795#L165-32 stopRequestedInDirection_#t~ret39#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1; 626787#L1952-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 626788#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 627294#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 627290#L2148-3 assume !(1 == ~currentHeading~0); 627284#L2158-9 assume !(0 == ~currentFloorID~0); 627279#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 627276#L2164-7 assume { :end_inline_continueInDirection } true; 627274#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 627273#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 627272#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 627271#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 627270#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 627267#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 627252#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 627253#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 627227#L1128-2 assume !false; 627228#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 627220#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 627221#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 627212#L1136 assume 1 != cleanup_~tmp___0~2#1; 627213#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 627208#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 627209#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 626904#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 626905#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 626899#L138-22 assume !(0 == isFloorCalling_~floorID#1); 626900#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 626879#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 626880#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 627676#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 627674#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 627672#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 627669#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 627667#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 627665#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 627663#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 627661#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 627658#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 627656#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 627653#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 627652#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 627650#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 627648#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 627649#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 627578#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 627708#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 627572#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 627701#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 627695#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 627597#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 627576#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 627573#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 627568#L2148-5 assume !(1 == ~currentHeading~0); 627562#L2158-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 627557#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 627554#L2164-11 assume { :end_inline_continueInDirection } true; 627551#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 627550#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 627549#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 627545#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 627546#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 627802#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 627258#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 627259#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 627232#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 627231#L1128-2 [2022-07-22 02:27:02,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:02,008 INFO L85 PathProgramCache]: Analyzing trace with hash 442994678, now seen corresponding path program 1 times [2022-07-22 02:27:02,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:02,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [534493370] [2022-07-22 02:27:02,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:02,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:02,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:02,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:02,039 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:02,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [534493370] [2022-07-22 02:27:02,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [534493370] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:02,039 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:02,039 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:27:02,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26044723] [2022-07-22 02:27:02,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:02,040 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:02,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:02,040 INFO L85 PathProgramCache]: Analyzing trace with hash 1737024472, now seen corresponding path program 1 times [2022-07-22 02:27:02,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:02,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [750662664] [2022-07-22 02:27:02,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:02,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:02,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:02,099 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 02:27:02,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:02,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [750662664] [2022-07-22 02:27:02,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [750662664] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:02,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:02,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:02,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1284127520] [2022-07-22 02:27:02,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:02,100 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:02,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:02,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:27:02,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:27:02,101 INFO L87 Difference]: Start difference. First operand 15747 states and 28980 transitions. cyclomatic complexity: 13234 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:02,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:02,465 INFO L93 Difference]: Finished difference Result 50907 states and 93705 transitions. [2022-07-22 02:27:02,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:27:02,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50907 states and 93705 transitions. [2022-07-22 02:27:02,666 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47587 [2022-07-22 02:27:02,799 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50907 states to 50907 states and 93705 transitions. [2022-07-22 02:27:02,799 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50907 [2022-07-22 02:27:02,837 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50907 [2022-07-22 02:27:02,837 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50907 states and 93705 transitions. [2022-07-22 02:27:02,869 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:02,869 INFO L369 hiAutomatonCegarLoop]: Abstraction has 50907 states and 93705 transitions. [2022-07-22 02:27:02,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50907 states and 93705 transitions. [2022-07-22 02:27:03,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50907 to 27994. [2022-07-22 02:27:03,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27994 states, 27994 states have (on average 1.8389297706651426) internal successors, (51479), 27993 states have internal predecessors, (51479), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:03,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27994 states to 27994 states and 51479 transitions. [2022-07-22 02:27:03,403 INFO L392 hiAutomatonCegarLoop]: Abstraction has 27994 states and 51479 transitions. [2022-07-22 02:27:03,403 INFO L374 stractBuchiCegarLoop]: Abstraction has 27994 states and 51479 transitions. [2022-07-22 02:27:03,403 INFO L287 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-07-22 02:27:03,403 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27994 states and 51479 transitions. [2022-07-22 02:27:03,467 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24735 [2022-07-22 02:27:03,467 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:03,467 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:03,473 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:03,473 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:03,473 INFO L752 eck$LassoCheckResult]: Stem: 692151#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 692152#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 692083#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 691837#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 691838#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 691992#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 692546#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 693462#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 691658#L772 assume !(0 == getOrigin_~person#1); 691659#L776 assume !(1 == getOrigin_~person#1); 691333#L780 assume !(2 == getOrigin_~person#1); 691334#L784 assume !(3 == getOrigin_~person#1); 692567#L788 assume !(4 == getOrigin_~person#1); 692769#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 691529#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 691530#L409 assume !(0 == initPersonOnFloor_~floor#1); 691997#L436 assume 1 == initPersonOnFloor_~floor#1; 691998#L437 assume !(0 == initPersonOnFloor_~person#1); 692760#L440 assume !(1 == initPersonOnFloor_~person#1); 692653#L443 assume !(2 == initPersonOnFloor_~person#1); 692654#L446 assume !(3 == initPersonOnFloor_~person#1); 692287#L449 assume !(4 == initPersonOnFloor_~person#1); 692288#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 692787#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 691477#L201 assume !(0 == callOnFloor_~floorID#1); 691479#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 692672#L213-2 assume { :end_inline_callOnFloor } true; 693579#L553 assume { :end_inline_initPersonOnFloor } true; 693578#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693577#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 693575#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 693574#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 693571#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 692341#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 691694#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 691696#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 693572#L2330 assume !(0 != timeShift_~tmp___9~2#1); 691060#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 691061#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 692824#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 692052#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 691503#L1776 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 691504#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 691967#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 691968#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 692670#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 693580#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 691859#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 691814#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 692751#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 693277#L2148-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 692934#L712-4 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 692935#L2152-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 693133#L2158-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 691411#L2164-5 assume { :end_inline_continueInDirection } true; 692208#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 692788#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 692146#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 692147#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 704372#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 704373#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 704349#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 704344#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 704342#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 704341#L1128-2 [2022-07-22 02:27:03,474 INFO L754 eck$LassoCheckResult]: Loop: 704341#L1128-2 assume !false; 704340#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 704339#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 704338#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 704337#L1136 assume 1 != cleanup_~tmp___0~2#1; 704336#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 704335#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 704334#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 704332#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 704330#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 704329#L138-22 assume !(0 == isFloorCalling_~floorID#1); 704327#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 704312#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 704308#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 704297#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 704296#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 704295#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 704293#L138-26 assume !(0 == isFloorCalling_~floorID#1); 704294#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 708589#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 704267#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 704264#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 704234#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 704233#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 704226#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 704227#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 693887#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 693767#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 693756#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 693741#L1772-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 693738#L712-5 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 693737#L1776-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 693734#L1782-2 assume ~currentFloorID~0 < 0; 693733#L1783-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693732#L138-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 693721#L165-27 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 693705#L1787-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 693700#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 693698#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 693695#L2148-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 693690#L712-6 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 693682#L2152-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 693675#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 693671#L2164-7 assume { :end_inline_continueInDirection } true; 693669#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 693668#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 693667#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 693666#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 693663#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 693656#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 693647#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 693646#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 693645#L1128-2 assume !false; 693644#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 693643#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 693642#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 693641#L1136 assume 1 != cleanup_~tmp___0~2#1; 693640#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693639#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 693638#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 693636#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 693634#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693633#L138-22 assume !(0 == isFloorCalling_~floorID#1); 693631#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 693616#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 693612#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 693601#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 693600#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 693599#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693597#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 693596#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 693595#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 693594#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 693593#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 693591#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 693590#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 693588#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 693587#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 693585#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 693583#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 693539#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 693540#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 702102#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 694730#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 702004#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 702005#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 702025#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 692072#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 702009#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 702010#L2148-5 assume !(1 == ~currentHeading~0); 704413#L2158-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 694737#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 694728#L2164-11 assume { :end_inline_continueInDirection } true; 704379#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 704378#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 704377#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 704376#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 704374#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 704375#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 704355#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 704345#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 704343#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 704341#L1128-2 [2022-07-22 02:27:03,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:03,474 INFO L85 PathProgramCache]: Analyzing trace with hash 1553736486, now seen corresponding path program 1 times [2022-07-22 02:27:03,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:03,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [300114944] [2022-07-22 02:27:03,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:03,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:03,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:03,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:03,517 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:03,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [300114944] [2022-07-22 02:27:03,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [300114944] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:03,517 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:03,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:27:03,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [824582759] [2022-07-22 02:27:03,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:03,518 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:03,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:03,518 INFO L85 PathProgramCache]: Analyzing trace with hash -1066028817, now seen corresponding path program 1 times [2022-07-22 02:27:03,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:03,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1586656876] [2022-07-22 02:27:03,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:03,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:03,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:03,559 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-07-22 02:27:03,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:03,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1586656876] [2022-07-22 02:27:03,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1586656876] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:03,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:03,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:03,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1168885739] [2022-07-22 02:27:03,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:03,560 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:03,560 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:03,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:27:03,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:27:03,561 INFO L87 Difference]: Start difference. First operand 27994 states and 51479 transitions. cyclomatic complexity: 23486 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:03,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:03,735 INFO L93 Difference]: Finished difference Result 28004 states and 51466 transitions. [2022-07-22 02:27:03,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:27:03,736 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28004 states and 51466 transitions. [2022-07-22 02:27:03,826 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24745 [2022-07-22 02:27:03,888 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28004 states to 28004 states and 51466 transitions. [2022-07-22 02:27:03,889 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28004 [2022-07-22 02:27:03,908 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28004 [2022-07-22 02:27:03,909 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28004 states and 51466 transitions. [2022-07-22 02:27:03,927 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:03,928 INFO L369 hiAutomatonCegarLoop]: Abstraction has 28004 states and 51466 transitions. [2022-07-22 02:27:03,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28004 states and 51466 transitions. [2022-07-22 02:27:04,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28004 to 27994. [2022-07-22 02:27:04,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27994 states, 27994 states have (on average 1.8379295563335) internal successors, (51451), 27993 states have internal predecessors, (51451), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:04,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27994 states to 27994 states and 51451 transitions. [2022-07-22 02:27:04,440 INFO L392 hiAutomatonCegarLoop]: Abstraction has 27994 states and 51451 transitions. [2022-07-22 02:27:04,440 INFO L374 stractBuchiCegarLoop]: Abstraction has 27994 states and 51451 transitions. [2022-07-22 02:27:04,440 INFO L287 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-07-22 02:27:04,440 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27994 states and 51451 transitions. [2022-07-22 02:27:04,500 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24735 [2022-07-22 02:27:04,500 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:04,501 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:04,507 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:04,507 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:04,507 INFO L752 eck$LassoCheckResult]: Stem: 748157#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 748158#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 748092#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 747850#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 747851#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 748002#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 748531#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 749352#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 747668#L772 assume !(0 == getOrigin_~person#1); 747669#L776 assume !(1 == getOrigin_~person#1); 747349#L780 assume !(2 == getOrigin_~person#1); 747350#L784 assume !(3 == getOrigin_~person#1); 748551#L788 assume !(4 == getOrigin_~person#1); 748738#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 747542#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 747543#L409 assume !(0 == initPersonOnFloor_~floor#1); 748007#L436 assume 1 == initPersonOnFloor_~floor#1; 748008#L437 assume !(0 == initPersonOnFloor_~person#1); 748730#L440 assume !(1 == initPersonOnFloor_~person#1); 748633#L443 assume !(2 == initPersonOnFloor_~person#1); 748634#L446 assume !(3 == initPersonOnFloor_~person#1); 748291#L449 assume !(4 == initPersonOnFloor_~person#1); 748292#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 748757#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 747491#L201 assume !(0 == callOnFloor_~floorID#1); 747493#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 748651#L213-2 assume { :end_inline_callOnFloor } true; 749419#L553 assume { :end_inline_initPersonOnFloor } true; 749418#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 749417#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 749415#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 749414#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 749413#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 748345#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 747705#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 747707#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 749420#L2330 assume !(0 != timeShift_~tmp___9~2#1); 747078#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 747079#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 748790#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 748063#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 747517#L1776 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 747518#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 747977#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 747978#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 748649#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 749421#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 747874#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 747827#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 748723#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 749197#L2148-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 748892#L712-4 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 748893#L2152-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 747425#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 747426#L2164-5 assume { :end_inline_continueInDirection } true; 748212#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 748758#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 748154#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 748155#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 748203#L2862 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 747423#L1577-1 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 747424#L2866 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 747902#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 748681#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 749393#L1128-2 [2022-07-22 02:27:04,508 INFO L754 eck$LassoCheckResult]: Loop: 749393#L1128-2 assume !false; 768460#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 768459#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 768458#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 768385#L1136 assume 1 != cleanup_~tmp___0~2#1; 768345#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 768337#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 768336#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 768332#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 768330#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 768331#L138-22 assume !(0 == isFloorCalling_~floorID#1); 772191#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 772186#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 772185#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 772173#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 772171#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 772170#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 772169#L138-26 assume !(0 == isFloorCalling_~floorID#1); 772161#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 772158#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 772156#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 772154#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 768498#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 768492#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 768324#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 768323#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 750934#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 750928#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 750925#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 750922#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 750923#L1941-2 assume !(0 == ~currentFloorID~0); 751834#L1947-2 assume ~currentFloorID~0 > 0; 751832#L1948-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 751833#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 752117#L165-32 stopRequestedInDirection_#t~ret39#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1; 750108#L1952-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 750104#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 750100#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 750098#L2148-3 assume !(1 == ~currentHeading~0); 749722#L2158-9 assume !(0 == ~currentFloorID~0); 749635#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 749626#L2164-7 assume { :end_inline_continueInDirection } true; 749617#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 749608#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 749605#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 749597#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 749593#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 749584#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 749569#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 749567#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 749565#L1128-2 assume !false; 749563#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 749561#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 749557#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 749551#L1136 assume 1 != cleanup_~tmp___0~2#1; 749539#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 749537#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 749535#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 749532#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 749529#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 749527#L138-22 assume !(0 == isFloorCalling_~floorID#1); 749524#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 749508#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 749476#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 749454#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 749452#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 749450#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 749447#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 749445#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 749443#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 749441#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 749439#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 749437#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 749434#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 749432#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 749429#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 749427#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 749425#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 749398#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 749399#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 754350#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 754255#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 754346#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 754343#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 754284#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 754262#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 754256#L2438-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 754257#L2203-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 754252#L2208-3 timeShift_#t~ret69#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 754246#L2148-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 754247#L712-8 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 754238#L2152-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 754239#L2158-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768482#L2164-9 assume { :end_inline_continueInDirection } true; 768481#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 768480#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 768479#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 768478#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 768476#L2862-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 768472#L1577-6 __utac_acc__Specification2_spec__3_#t~ret98#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret98#1;havoc __utac_acc__Specification2_spec__3_#t~ret98#1; 768463#L2866-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 768462#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 768461#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 749393#L1128-2 [2022-07-22 02:27:04,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:04,509 INFO L85 PathProgramCache]: Analyzing trace with hash -2040166232, now seen corresponding path program 1 times [2022-07-22 02:27:04,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:04,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951160239] [2022-07-22 02:27:04,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:04,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:04,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:04,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:04,537 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:04,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951160239] [2022-07-22 02:27:04,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951160239] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:04,537 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:04,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:27:04,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1843776117] [2022-07-22 02:27:04,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:04,538 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:04,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:04,538 INFO L85 PathProgramCache]: Analyzing trace with hash -453396650, now seen corresponding path program 1 times [2022-07-22 02:27:04,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:04,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [467467609] [2022-07-22 02:27:04,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:04,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:04,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:04,570 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 02:27:04,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:04,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [467467609] [2022-07-22 02:27:04,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [467467609] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:04,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:04,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:04,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907683197] [2022-07-22 02:27:04,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:04,572 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:04,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:04,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:27:04,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:27:04,572 INFO L87 Difference]: Start difference. First operand 27994 states and 51451 transitions. cyclomatic complexity: 23458 Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:04,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:04,762 INFO L93 Difference]: Finished difference Result 55197 states and 101510 transitions. [2022-07-22 02:27:04,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:27:04,762 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55197 states and 101510 transitions. [2022-07-22 02:27:05,244 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 49402 [2022-07-22 02:27:05,376 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55197 states to 55197 states and 101510 transitions. [2022-07-22 02:27:05,376 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55197 [2022-07-22 02:27:05,418 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55197 [2022-07-22 02:27:05,418 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55197 states and 101510 transitions. [2022-07-22 02:27:05,454 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:05,455 INFO L369 hiAutomatonCegarLoop]: Abstraction has 55197 states and 101510 transitions. [2022-07-22 02:27:05,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55197 states and 101510 transitions. [2022-07-22 02:27:05,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55197 to 55197. [2022-07-22 02:27:05,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55197 states, 55197 states have (on average 1.8390492236896934) internal successors, (101510), 55196 states have internal predecessors, (101510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:06,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55197 states to 55197 states and 101510 transitions. [2022-07-22 02:27:06,305 INFO L392 hiAutomatonCegarLoop]: Abstraction has 55197 states and 101510 transitions. [2022-07-22 02:27:06,305 INFO L374 stractBuchiCegarLoop]: Abstraction has 55197 states and 101510 transitions. [2022-07-22 02:27:06,305 INFO L287 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-07-22 02:27:06,305 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55197 states and 101510 transitions. [2022-07-22 02:27:06,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 49402 [2022-07-22 02:27:06,426 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:06,426 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:06,434 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:06,435 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:06,435 INFO L752 eck$LassoCheckResult]: Stem: 831371#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 831372#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 831302#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 831056#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 831057#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 831211#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 831750#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 832604#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 830874#L772 assume !(0 == getOrigin_~person#1); 830875#L776 assume !(1 == getOrigin_~person#1); 830551#L780 assume !(2 == getOrigin_~person#1); 830552#L784 assume !(3 == getOrigin_~person#1); 831771#L788 assume !(4 == getOrigin_~person#1); 831966#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 830745#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 830746#L409 assume !(0 == initPersonOnFloor_~floor#1); 831216#L436 assume 1 == initPersonOnFloor_~floor#1; 831217#L437 assume !(0 == initPersonOnFloor_~person#1); 831958#L440 assume !(1 == initPersonOnFloor_~person#1); 831857#L443 assume !(2 == initPersonOnFloor_~person#1); 831858#L446 assume !(3 == initPersonOnFloor_~person#1); 831508#L449 assume !(4 == initPersonOnFloor_~person#1); 831509#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 831984#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 830694#L201 assume !(0 == callOnFloor_~floorID#1); 830696#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 831875#L213-2 assume { :end_inline_callOnFloor } true; 832691#L553 assume { :end_inline_initPersonOnFloor } true; 832690#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 832688#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 832687#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 832686#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 832683#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 831559#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 830911#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 830913#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 832684#L2330 assume !(0 != timeShift_~tmp___9~2#1); 830278#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 830279#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 832016#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 831272#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 830720#L1776 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 830721#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 831186#L2429 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 831187#L2203 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 831873#L2208 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 832692#L1772-1 assume !(1 == stopRequestedInDirection_~dir#1); 831078#L1941-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 831033#L2094-1 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 831951#L2438 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 832430#L2148-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 832112#L712-4 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 832113#L2152-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 830627#L2158-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 830628#L2164-5 assume { :end_inline_continueInDirection } true; 840943#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 840940#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 840937#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 840932#L2860 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 840928#L2875 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 840910#L2890 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 840905#L2905 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 840902#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 840900#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 840899#L1128-2 [2022-07-22 02:27:06,435 INFO L754 eck$LassoCheckResult]: Loop: 840899#L1128-2 assume !false; 840898#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 840897#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 840896#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 840895#L1136 assume 1 != cleanup_~tmp___0~2#1; 840894#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 840893#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 840892#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 840890#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 840888#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 840887#L138-22 assume !(0 == isFloorCalling_~floorID#1); 840885#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 840870#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 840866#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 840855#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 840854#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 840853#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 840851#L138-26 assume !(0 == isFloorCalling_~floorID#1); 840852#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 877738#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 877717#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 877718#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 877730#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 877728#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 877721#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 877722#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 877704#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 840514#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 840509#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 840506#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 840507#L1941-2 assume !(0 == ~currentFloorID~0); 840521#L1947-2 assume ~currentFloorID~0 > 0; 840519#L1948-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 840520#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 840558#L165-32 stopRequestedInDirection_#t~ret39#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1; 840452#L1952-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 840446#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 840444#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 840443#L2148-3 assume !(1 == ~currentHeading~0); 840364#L2158-9 assume !(0 == ~currentFloorID~0); 840357#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840193#L2164-7 assume { :end_inline_continueInDirection } true; 840191#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 840135#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 840134#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 840133#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 840132#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 840129#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 836940#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 837633#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 837069#L1128-2 assume !false; 837037#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 837035#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 833458#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 833411#L1136 assume 1 != cleanup_~tmp___0~2#1; 833389#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 833387#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 833385#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 833382#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 833379#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 833377#L138-22 assume !(0 == isFloorCalling_~floorID#1); 833374#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 833358#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 833326#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 833304#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 833302#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 833300#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 833297#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 833295#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 833293#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 833291#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 833289#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 833287#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 833284#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 833282#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 833278#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 833277#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 833271#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 833272#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 842324#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 841340#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 841337#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 841336#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 841334#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 841059#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 841038#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 841035#L2438-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 840978#L2203-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 840992#L2208-3 timeShift_#t~ret69#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 840983#L2148-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 840975#L712-8 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 840967#L2152-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 840958#L2158-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840949#L2164-9 assume { :end_inline_continueInDirection } true; 840945#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 840942#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 840939#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 840936#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 840930#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 840917#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 840915#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 840903#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 840901#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 840899#L1128-2 [2022-07-22 02:27:06,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:06,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1550038934, now seen corresponding path program 1 times [2022-07-22 02:27:06,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:06,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1716368323] [2022-07-22 02:27:06,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:06,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:06,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:06,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:06,470 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:06,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1716368323] [2022-07-22 02:27:06,470 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1716368323] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:06,470 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:06,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:27:06,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549982473] [2022-07-22 02:27:06,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:06,471 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:06,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:06,472 INFO L85 PathProgramCache]: Analyzing trace with hash 36730648, now seen corresponding path program 1 times [2022-07-22 02:27:06,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:06,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1568963710] [2022-07-22 02:27:06,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:06,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:06,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:06,504 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 02:27:06,504 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:06,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1568963710] [2022-07-22 02:27:06,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1568963710] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:06,504 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:06,505 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:06,505 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929722035] [2022-07-22 02:27:06,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:06,505 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:06,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:06,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:27:06,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:27:06,506 INFO L87 Difference]: Start difference. First operand 55197 states and 101510 transitions. cyclomatic complexity: 46314 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:07,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:07,249 INFO L93 Difference]: Finished difference Result 155042 states and 285438 transitions. [2022-07-22 02:27:07,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:27:07,250 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 155042 states and 285438 transitions. [2022-07-22 02:27:08,209 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 148922 [2022-07-22 02:27:08,627 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 155042 states to 155042 states and 285438 transitions. [2022-07-22 02:27:08,628 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 155042 [2022-07-22 02:27:08,758 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 155042 [2022-07-22 02:27:08,759 INFO L73 IsDeterministic]: Start isDeterministic. Operand 155042 states and 285438 transitions. [2022-07-22 02:27:09,268 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:09,268 INFO L369 hiAutomatonCegarLoop]: Abstraction has 155042 states and 285438 transitions. [2022-07-22 02:27:09,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155042 states and 285438 transitions. [2022-07-22 02:27:09,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155042 to 62583. [2022-07-22 02:27:10,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62583 states, 62583 states have (on average 1.8403400284422287) internal successors, (115174), 62582 states have internal predecessors, (115174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:10,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62583 states to 62583 states and 115174 transitions. [2022-07-22 02:27:10,408 INFO L392 hiAutomatonCegarLoop]: Abstraction has 62583 states and 115174 transitions. [2022-07-22 02:27:10,408 INFO L374 stractBuchiCegarLoop]: Abstraction has 62583 states and 115174 transitions. [2022-07-22 02:27:10,408 INFO L287 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-07-22 02:27:10,408 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62583 states and 115174 transitions. [2022-07-22 02:27:10,565 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 56656 [2022-07-22 02:27:10,565 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:10,565 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:10,577 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:10,577 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:10,577 INFO L752 eck$LassoCheckResult]: Stem: 1041635#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1041636#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 1041565#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1041318#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1041319#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 1041474#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 1042023#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1042914#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1041137#L772 assume !(0 == getOrigin_~person#1); 1041138#L776 assume !(1 == getOrigin_~person#1); 1040812#L780 assume !(2 == getOrigin_~person#1); 1040813#L784 assume !(3 == getOrigin_~person#1); 1042042#L788 assume !(4 == getOrigin_~person#1); 1042243#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1041010#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1041011#L409 assume !(0 == initPersonOnFloor_~floor#1); 1041480#L436 assume 1 == initPersonOnFloor_~floor#1; 1041481#L437 assume !(0 == initPersonOnFloor_~person#1); 1042236#L440 assume !(1 == initPersonOnFloor_~person#1); 1042132#L443 assume !(2 == initPersonOnFloor_~person#1); 1042133#L446 assume !(3 == initPersonOnFloor_~person#1); 1041780#L449 assume !(4 == initPersonOnFloor_~person#1); 1041781#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1042263#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1040958#L201 assume !(0 == callOnFloor_~floorID#1); 1040960#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1042152#L213-2 assume { :end_inline_callOnFloor } true; 1043011#L553 assume { :end_inline_initPersonOnFloor } true; 1043010#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1043009#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1043007#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1043006#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1043004#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1041831#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1041173#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1041175#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1043005#L2330 assume !(0 != timeShift_~tmp___9~2#1); 1040538#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 1040539#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1042298#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1041534#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1040985#L1776 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1040986#L1782 assume !(~currentFloorID~0 < 0); 1040711#L1797 assume !(~currentFloorID~0 < 0); 1040712#L1810 assume ~currentFloorID~0 < 1; 1042634#L1812 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1042357#L1826 assume ~currentFloorID~0 < 1; 1041874#L1828 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1041875#L1829 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1041064#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1043008#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1041653#L2148 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1041654#L712-1 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1040593#L2152 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1040594#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1041166#L2164-1 assume { :end_inline_continueInDirection } true; 1042264#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1042265#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1041630#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041631#L2860 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041682#L2875 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1040510#L2890 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1040512#L2905 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1041850#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1042186#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1042967#L1128-2 [2022-07-22 02:27:10,578 INFO L754 eck$LassoCheckResult]: Loop: 1042967#L1128-2 assume !false; 1089204#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1089203#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1089202#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1089201#L1136 assume 1 != cleanup_~tmp___0~2#1; 1089200#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1089199#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1089198#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1089196#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1089194#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1089193#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1089191#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1089176#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1089172#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1089161#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1089160#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1089159#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1089158#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1089152#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1089150#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1089149#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1089144#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1089134#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1089131#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1089128#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1089127#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1044839#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1044824#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1044813#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1044782#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 1044783#L1941-2 assume !(0 == ~currentFloorID~0); 1044808#L1947-2 assume ~currentFloorID~0 > 0; 1044806#L1948-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1044803#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1044790#L165-32 stopRequestedInDirection_#t~ret39#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1; 1044707#L1952-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1044705#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1050060#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1050059#L2148-3 assume !(1 == ~currentHeading~0); 1050058#L2158-9 assume !(0 == ~currentFloorID~0); 1044057#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1050055#L2164-7 assume { :end_inline_continueInDirection } true; 1050053#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1050052#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1050051#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1050049#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1050050#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1049660#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1045495#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1049651#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1049534#L1128-2 assume !false; 1049529#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1049521#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1049513#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1049508#L1136 assume 1 != cleanup_~tmp___0~2#1; 1049498#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1049235#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1049223#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1049220#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1049215#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1049213#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1045461#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1045458#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1045454#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1045431#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1045428#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1045425#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1045419#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1045413#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1045402#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1045399#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1045396#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1045393#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1045389#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1045386#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1045382#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1045332#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1045328#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 1045329#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1080826#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1041398#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1041399#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1042458#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1073327#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 1041433#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1040970#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 1042867#L2438-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1042869#L2203-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1073513#L2208-3 timeShift_#t~ret69#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1073487#L2148-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1073477#L712-8 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1042648#L2152-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1042649#L2158-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1042225#L2164-9 assume { :end_inline_continueInDirection } true; 1041402#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1089229#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1089227#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1089225#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1089221#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1089213#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1089211#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1089206#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1089205#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1042967#L1128-2 [2022-07-22 02:27:10,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:10,579 INFO L85 PathProgramCache]: Analyzing trace with hash 487875182, now seen corresponding path program 1 times [2022-07-22 02:27:10,579 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:10,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1652276207] [2022-07-22 02:27:10,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:10,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:10,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:10,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:10,618 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:10,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1652276207] [2022-07-22 02:27:10,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1652276207] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:10,619 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:10,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:27:10,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296228786] [2022-07-22 02:27:10,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:10,620 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:10,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:10,620 INFO L85 PathProgramCache]: Analyzing trace with hash 36730648, now seen corresponding path program 2 times [2022-07-22 02:27:10,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:10,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496005610] [2022-07-22 02:27:10,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:10,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:10,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:10,656 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 02:27:10,656 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:10,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496005610] [2022-07-22 02:27:10,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496005610] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:10,657 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:10,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:10,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660098062] [2022-07-22 02:27:10,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:10,657 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:10,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:10,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:27:10,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:27:10,658 INFO L87 Difference]: Start difference. First operand 62583 states and 115174 transitions. cyclomatic complexity: 52593 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:10,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:10,949 INFO L93 Difference]: Finished difference Result 62583 states and 114846 transitions. [2022-07-22 02:27:10,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:27:10,949 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62583 states and 114846 transitions. [2022-07-22 02:27:11,218 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 56656 [2022-07-22 02:27:11,396 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62583 states to 62583 states and 114846 transitions. [2022-07-22 02:27:11,396 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62583 [2022-07-22 02:27:11,450 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62583 [2022-07-22 02:27:11,450 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62583 states and 114846 transitions. [2022-07-22 02:27:11,495 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:11,495 INFO L369 hiAutomatonCegarLoop]: Abstraction has 62583 states and 114846 transitions. [2022-07-22 02:27:11,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62583 states and 114846 transitions. [2022-07-22 02:27:12,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62583 to 62583. [2022-07-22 02:27:12,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62583 states, 62583 states have (on average 1.8350989885432145) internal successors, (114846), 62582 states have internal predecessors, (114846), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:12,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62583 states to 62583 states and 114846 transitions. [2022-07-22 02:27:12,439 INFO L392 hiAutomatonCegarLoop]: Abstraction has 62583 states and 114846 transitions. [2022-07-22 02:27:12,439 INFO L374 stractBuchiCegarLoop]: Abstraction has 62583 states and 114846 transitions. [2022-07-22 02:27:12,439 INFO L287 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-07-22 02:27:12,440 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62583 states and 114846 transitions. [2022-07-22 02:27:12,600 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 56656 [2022-07-22 02:27:12,600 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:12,600 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:12,613 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:12,614 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:12,614 INFO L752 eck$LassoCheckResult]: Stem: 1166805#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1166806#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 1166738#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1166490#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1166491#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 1166647#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 1167184#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1168014#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1166310#L772 assume !(0 == getOrigin_~person#1); 1166311#L776 assume !(1 == getOrigin_~person#1); 1165997#L780 assume !(2 == getOrigin_~person#1); 1165998#L784 assume !(3 == getOrigin_~person#1); 1167203#L788 assume !(4 == getOrigin_~person#1); 1167399#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1166189#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1166190#L409 assume !(0 == initPersonOnFloor_~floor#1); 1166653#L436 assume 1 == initPersonOnFloor_~floor#1; 1166654#L437 assume !(0 == initPersonOnFloor_~person#1); 1167393#L440 assume !(1 == initPersonOnFloor_~person#1); 1167292#L443 assume !(2 == initPersonOnFloor_~person#1); 1167293#L446 assume !(3 == initPersonOnFloor_~person#1); 1166941#L449 assume !(4 == initPersonOnFloor_~person#1); 1166942#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1167417#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1166137#L201 assume !(0 == callOnFloor_~floorID#1); 1166139#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1167311#L213-2 assume { :end_inline_callOnFloor } true; 1168084#L553 assume { :end_inline_initPersonOnFloor } true; 1168083#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1168081#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1168080#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1168079#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1168077#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1166996#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1166346#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1166348#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1168078#L2330 assume !(0 != timeShift_~tmp___9~2#1); 1165722#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 1165723#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1167453#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1166708#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1166163#L1776 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1166164#L1782 assume !(~currentFloorID~0 < 0); 1165897#L1797 assume !(~currentFloorID~0 < 0); 1165898#L1810 assume ~currentFloorID~0 < 1; 1167761#L1812 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1167762#L138-2 assume !(0 == isFloorCalling_~floorID#1); 1168009#L142-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1165874#L165-2 stopRequestedInDirection_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret35#1;havoc stopRequestedInDirection_#t~ret35#1; 1166038#L1816 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1166241#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1168082#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1166825#L2148 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1166826#L712-1 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1165777#L2152 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1165778#L2158-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1166339#L2164-1 assume { :end_inline_continueInDirection } true; 1166862#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1183712#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1183709#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183704#L2860 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183700#L2875 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183682#L2890 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183677#L2905 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183674#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1183672#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1183671#L1128-2 [2022-07-22 02:27:12,614 INFO L754 eck$LassoCheckResult]: Loop: 1183671#L1128-2 assume !false; 1183670#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1183669#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1183668#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1183667#L1136 assume 1 != cleanup_~tmp___0~2#1; 1183666#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1183665#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1183664#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1183662#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1183660#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1183659#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1183657#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1183642#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1183638#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1183627#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1183626#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1183625#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1183623#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1183624#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1198264#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1198256#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1198257#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1198261#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1198259#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1198258#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1198255#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1198188#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1175636#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1175633#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1175630#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 1175628#L1941-2 assume !(0 == ~currentFloorID~0); 1175627#L1947-2 assume ~currentFloorID~0 > 0; 1175625#L1948-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1175623#L138-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1175622#L165-32 stopRequestedInDirection_#t~ret39#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1; 1175428#L1952-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1175423#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1175424#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1175738#L2148-3 assume !(1 == ~currentHeading~0); 1175733#L2158-9 assume !(0 == ~currentFloorID~0); 1175052#L2158-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1168456#L2164-7 assume { :end_inline_continueInDirection } true; 1168455#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1168567#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1168445#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1168443#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1168444#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1168435#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1168427#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1173222#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1173221#L1128-2 assume !false; 1173220#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1173219#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1173218#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1173217#L1136 assume 1 != cleanup_~tmp___0~2#1; 1173216#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1173215#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1173214#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1173212#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1173210#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1173209#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1173207#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1173204#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1173203#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1173192#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1173191#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1173190#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1173188#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1173187#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1173186#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1173185#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1173184#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1173177#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1173175#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1173168#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1168235#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1168233#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1168231#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 1168064#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1168065#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1183215#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1183213#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1183214#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1183204#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 1183159#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1183153#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 1183149#L2438-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1183035#L2203-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1183176#L2208-3 timeShift_#t~ret69#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1183174#L2148-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1183154#L712-8 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1183151#L2152-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1183152#L2158-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1183720#L2164-9 assume { :end_inline_continueInDirection } true; 1183716#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1183714#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1183711#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183708#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183702#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183689#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183687#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1183675#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1183673#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1183671#L1128-2 [2022-07-22 02:27:12,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:12,615 INFO L85 PathProgramCache]: Analyzing trace with hash -121653498, now seen corresponding path program 1 times [2022-07-22 02:27:12,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:12,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [719760917] [2022-07-22 02:27:12,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:12,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:12,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:12,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:12,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:12,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [719760917] [2022-07-22 02:27:12,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [719760917] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:12,673 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:12,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:12,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099806362] [2022-07-22 02:27:12,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:12,674 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:12,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:12,675 INFO L85 PathProgramCache]: Analyzing trace with hash 36730648, now seen corresponding path program 3 times [2022-07-22 02:27:12,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:12,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1736809280] [2022-07-22 02:27:12,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:12,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:12,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:12,708 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 02:27:12,708 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:12,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1736809280] [2022-07-22 02:27:12,709 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1736809280] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:12,709 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:12,709 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:12,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [257504391] [2022-07-22 02:27:12,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:12,710 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:12,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:12,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:27:12,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:27:12,711 INFO L87 Difference]: Start difference. First operand 62583 states and 114846 transitions. cyclomatic complexity: 52265 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:14,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:14,059 INFO L93 Difference]: Finished difference Result 123375 states and 225445 transitions. [2022-07-22 02:27:14,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-22 02:27:14,060 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 123375 states and 225445 transitions. [2022-07-22 02:27:14,528 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 117344 [2022-07-22 02:27:14,864 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 123375 states to 123375 states and 225445 transitions. [2022-07-22 02:27:14,864 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 123375 [2022-07-22 02:27:14,948 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 123375 [2022-07-22 02:27:14,948 INFO L73 IsDeterministic]: Start isDeterministic. Operand 123375 states and 225445 transitions. [2022-07-22 02:27:15,017 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:15,017 INFO L369 hiAutomatonCegarLoop]: Abstraction has 123375 states and 225445 transitions. [2022-07-22 02:27:15,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123375 states and 225445 transitions. [2022-07-22 02:27:16,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123375 to 63950. [2022-07-22 02:27:16,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63950 states, 63950 states have (on average 1.8308991399530883) internal successors, (117086), 63949 states have internal predecessors, (117086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:16,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63950 states to 63950 states and 117086 transitions. [2022-07-22 02:27:16,240 INFO L392 hiAutomatonCegarLoop]: Abstraction has 63950 states and 117086 transitions. [2022-07-22 02:27:16,240 INFO L374 stractBuchiCegarLoop]: Abstraction has 63950 states and 117086 transitions. [2022-07-22 02:27:16,240 INFO L287 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2022-07-22 02:27:16,241 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63950 states and 117086 transitions. [2022-07-22 02:27:16,410 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 58048 [2022-07-22 02:27:16,410 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:16,410 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:16,422 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:16,422 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:16,422 INFO L752 eck$LassoCheckResult]: Stem: 1352797#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1352798#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 1352729#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1352488#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1352489#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 1352640#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 1353186#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1354065#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1352304#L772 assume !(0 == getOrigin_~person#1); 1352305#L776 assume !(1 == getOrigin_~person#1); 1351986#L780 assume !(2 == getOrigin_~person#1); 1351987#L784 assume !(3 == getOrigin_~person#1); 1353208#L788 assume !(4 == getOrigin_~person#1); 1353403#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1352177#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1352178#L409 assume !(0 == initPersonOnFloor_~floor#1); 1352645#L436 assume 1 == initPersonOnFloor_~floor#1; 1352646#L437 assume !(0 == initPersonOnFloor_~person#1); 1353396#L440 assume !(1 == initPersonOnFloor_~person#1); 1353293#L443 assume !(2 == initPersonOnFloor_~person#1); 1353294#L446 assume !(3 == initPersonOnFloor_~person#1); 1352937#L449 assume !(4 == initPersonOnFloor_~person#1); 1352938#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1353420#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1352126#L201 assume !(0 == callOnFloor_~floorID#1); 1352128#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1353312#L213-2 assume { :end_inline_callOnFloor } true; 1354167#L553 assume { :end_inline_initPersonOnFloor } true; 1354166#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1354164#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1354163#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1354162#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1354159#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1352995#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1352341#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1352343#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1354160#L2330 assume !(0 != timeShift_~tmp___9~2#1); 1351709#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 1351710#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1353454#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1352701#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1352152#L1776 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1352153#L1782 assume !(~currentFloorID~0 < 0); 1351883#L1797 assume !(~currentFloorID~0 < 0); 1351884#L1810 assume ~currentFloorID~0 < 1; 1353789#L1812 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1353790#L138-2 assume !(0 == isFloorCalling_~floorID#1); 1354056#L142-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1351860#L165-2 stopRequestedInDirection_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret35#1;havoc stopRequestedInDirection_#t~ret35#1; 1352027#L1816 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1352230#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1354165#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1352817#L2148 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1352818#L712-1 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1351764#L2152 assume !(0 != continueInDirection_~tmp~16#1); 1351765#L2158-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1352337#L2164-1 assume { :end_inline_continueInDirection } true; 1352856#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1354785#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1352792#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1352793#L2860 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388056#L2875 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388051#L2890 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388046#L2905 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388044#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1388042#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1388041#L1128-2 [2022-07-22 02:27:16,423 INFO L754 eck$LassoCheckResult]: Loop: 1388041#L1128-2 assume !false; 1388040#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1388039#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1388038#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1388037#L1136 assume 1 != cleanup_~tmp___0~2#1; 1388036#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1388035#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1388034#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1388032#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1388033#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1399852#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1401319#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1401304#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1401300#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1401289#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1401288#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1401287#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1401286#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1401220#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1401207#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1401201#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1401197#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1400810#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1400331#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1400322#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1399845#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1384757#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1384752#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1384744#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1383334#L1772-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1383332#L712-5 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1383330#L1776-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1383328#L1782-2 assume ~currentFloorID~0 < 0; 1383327#L1783-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1383326#L138-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1383315#L165-27 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 1383296#L1787-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1383289#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1383281#L2429-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1383280#L2148-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1383279#L712-6 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1383278#L2152-9 assume !(0 != continueInDirection_~tmp~16#1); 1383277#L2158-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1383275#L2164-7 assume { :end_inline_continueInDirection } true; 1383264#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1383263#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1383261#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1383258#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1383255#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1383248#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1357580#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1383239#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1383237#L1128-2 assume !false; 1383235#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1383233#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1383215#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1383206#L1136 assume 1 != cleanup_~tmp___0~2#1; 1383194#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1383192#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1383190#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1383187#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1383185#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1383184#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1383182#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1383166#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1383161#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1383149#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1383147#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1383145#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1383142#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1383140#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1383138#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1383137#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1383134#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1383132#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1383131#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1383130#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1383122#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1383087#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1383078#L1772-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1383077#L712-5 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1383075#L1776-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1383074#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1383073#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1383071#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1383069#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1383070#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 1399668#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1399643#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 1399598#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1399599#L2148-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1352508#L712-9 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1352509#L2152-15 assume !(0 != continueInDirection_~tmp~16#1); 1382981#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1353929#L2164-11 assume { :end_inline_continueInDirection } true; 1352564#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1388081#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1388079#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388077#L2860-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388073#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388065#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388063#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1388058#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1388043#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1388041#L1128-2 [2022-07-22 02:27:16,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:16,424 INFO L85 PathProgramCache]: Analyzing trace with hash -564552638, now seen corresponding path program 1 times [2022-07-22 02:27:16,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:16,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344616725] [2022-07-22 02:27:16,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:16,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:16,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:16,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:27:16,480 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:16,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [344616725] [2022-07-22 02:27:16,481 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [344616725] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:16,481 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:16,481 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:27:16,481 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2137305508] [2022-07-22 02:27:16,481 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:16,482 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:27:16,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:16,483 INFO L85 PathProgramCache]: Analyzing trace with hash 2146106277, now seen corresponding path program 1 times [2022-07-22 02:27:16,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:16,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1603490095] [2022-07-22 02:27:16,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:16,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:16,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:16,523 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-07-22 02:27:16,524 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:16,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1603490095] [2022-07-22 02:27:16,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1603490095] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:16,524 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:16,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:16,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [32996137] [2022-07-22 02:27:16,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:16,525 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:16,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:16,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 02:27:16,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 02:27:16,526 INFO L87 Difference]: Start difference. First operand 63950 states and 117086 transitions. cyclomatic complexity: 53138 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:18,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:27:18,282 INFO L93 Difference]: Finished difference Result 192463 states and 351391 transitions. [2022-07-22 02:27:18,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-22 02:27:18,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 192463 states and 351391 transitions. [2022-07-22 02:27:19,678 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 186038 [2022-07-22 02:27:20,222 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 192463 states to 192319 states and 351215 transitions. [2022-07-22 02:27:20,222 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 192319 [2022-07-22 02:27:20,343 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 192319 [2022-07-22 02:27:20,343 INFO L73 IsDeterministic]: Start isDeterministic. Operand 192319 states and 351215 transitions. [2022-07-22 02:27:20,450 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:27:20,450 INFO L369 hiAutomatonCegarLoop]: Abstraction has 192319 states and 351215 transitions. [2022-07-22 02:27:20,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192319 states and 351215 transitions. [2022-07-22 02:27:21,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192319 to 104541. [2022-07-22 02:27:21,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104541 states, 104541 states have (on average 1.8230072411781024) internal successors, (190579), 104540 states have internal predecessors, (190579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:27:22,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104541 states to 104541 states and 190579 transitions. [2022-07-22 02:27:22,069 INFO L392 hiAutomatonCegarLoop]: Abstraction has 104541 states and 190579 transitions. [2022-07-22 02:27:22,069 INFO L374 stractBuchiCegarLoop]: Abstraction has 104541 states and 190579 transitions. [2022-07-22 02:27:22,069 INFO L287 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2022-07-22 02:27:22,069 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 104541 states and 190579 transitions. [2022-07-22 02:27:22,371 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 98518 [2022-07-22 02:27:22,371 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:27:22,371 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:27:22,392 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:22,392 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:27:22,392 INFO L752 eck$LassoCheckResult]: Stem: 1609235#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1609236#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~9#1, main_~tmp~10#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~10#1;assume { :begin_inline_select_helpers } true; 1609167#L872 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1608923#L865 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1608924#L880 main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~10#1 := main_#t~ret24#1;havoc main_#t~ret24#1; 1609079#L1324 assume 0 != main_~tmp~10#1;assume { :begin_inline_setup } true; 1609619#L1296 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1610507#L2801 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret17#1, bigMacCall_~tmp~7#1;havoc bigMacCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1608741#L772 assume !(0 == getOrigin_~person#1); 1608742#L776 assume !(1 == getOrigin_~person#1); 1608420#L780 assume !(2 == getOrigin_~person#1); 1608421#L784 assume !(3 == getOrigin_~person#1); 1609640#L788 assume !(4 == getOrigin_~person#1); 1609838#L792 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1608613#L797 bigMacCall_#t~ret17#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~7#1 := bigMacCall_#t~ret17#1;havoc bigMacCall_#t~ret17#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1608614#L409 assume !(0 == initPersonOnFloor_~floor#1); 1609084#L436 assume 1 == initPersonOnFloor_~floor#1; 1609085#L437 assume !(0 == initPersonOnFloor_~person#1); 1609831#L440 assume !(1 == initPersonOnFloor_~person#1); 1609726#L443 assume !(2 == initPersonOnFloor_~person#1); 1609727#L446 assume !(3 == initPersonOnFloor_~person#1); 1609373#L449 assume !(4 == initPersonOnFloor_~person#1); 1609374#L452 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1609856#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1608562#L201 assume !(0 == callOnFloor_~floorID#1); 1608564#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1609745#L213-2 assume { :end_inline_callOnFloor } true; 1610607#L553 assume { :end_inline_initPersonOnFloor } true; 1610606#L1100 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret18#1, cleanup_#t~ret19#1, cleanup_~i~2#1, cleanup_~tmp~8#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~8#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1610604#L138 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1610603#L165 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1610602#L2181 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1610600#L1585 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1609426#L1606 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1608779#L2188 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1608781#L2193 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1610601#L2330 assume !(0 != timeShift_~tmp___9~2#1); 1608147#L2421 assume 1 == ~doorState~0;~doorState~0 := 0; 1608148#L2421-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1609893#L1772 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1609140#L712 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1608588#L1776 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1608589#L1782 assume !(~currentFloorID~0 < 0); 1608319#L1797 assume !(~currentFloorID~0 < 0); 1608320#L1810 assume ~currentFloorID~0 < 1; 1610227#L1812 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1610228#L138-2 assume !(0 == isFloorCalling_~floorID#1); 1610497#L142-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1608297#L165-2 stopRequestedInDirection_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret35#1;havoc stopRequestedInDirection_#t~ret35#1; 1608462#L1816 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1608668#L2094 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1610605#L2429 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1609255#L2148 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1609256#L712-1 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1608202#L2152 assume !(0 != continueInDirection_~tmp~16#1); 1608203#L2158-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1608775#L2164-1 assume { :end_inline_continueInDirection } true; 1609292#L2438-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1611253#L1568 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1609230#L2846 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1609231#L2860 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1609283#L2862 assume !(0 != ~floorButtons_spc2_1~0); 1612003#L2875 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1612002#L2890 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1612001#L2905 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1612000#L2906 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1611998#L2453 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1611995#L1128-2 [2022-07-22 02:27:22,393 INFO L754 eck$LassoCheckResult]: Loop: 1611995#L1128-2 assume !false; 1611991#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1611988#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1611984#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1611977#L1136 assume 1 != cleanup_~tmp___0~2#1; 1611970#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1611969#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1611967#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1611968#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1611962#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1611960#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1611926#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1611921#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1611918#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1611908#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1611885#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1611886#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1611873#L138-26 assume !(0 == isFloorCalling_~floorID#1); 1611865#L142-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1611856#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1611851#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1611846#L1585-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1611839#L1589-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1611830#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1611824#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1611817#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1611812#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1611802#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1611800#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1611799#L1772-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1611798#L712-5 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1611796#L1776-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1611795#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1611794#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1611792#L2203-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1611793#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1612075#L1772-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1611784#L712-7 stopRequestedInDirection_#t~ret33#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 1611538#L1776-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1611539#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 1630645#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1630642#L2148-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1630636#L712-9 continueInDirection_#t~ret44#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret44#1;havoc continueInDirection_#t~ret44#1; 1630628#L2152-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1630622#L2158-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1630618#L2164-11 assume { :end_inline_continueInDirection } true; 1630616#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1611429#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1611430#L2846-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1630607#L2847-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1630606#L1577-5 __utac_acc__Specification2_spec__3_#t~ret97#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret97#1;havoc __utac_acc__Specification2_spec__3_#t~ret97#1; 1611399#L2851-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1611390#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1661061#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1661058#L1128-2 assume !false; 1661055#L1129 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1661053#L1132 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1661035#L1410 cleanup_#t~ret18#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret18#1;havoc cleanup_#t~ret18#1; 1661029#L1136 assume 1 != cleanup_~tmp___0~2#1; 1661016#L1136-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret32#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1661013#L138-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1661011#L165-21 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1661009#L1676 assume !(0 != anyStopRequested_~tmp___3~0#1); 1661001#L1680 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1660999#L138-22 assume !(0 == isFloorCalling_~floorID#1); 1660948#L142-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1660945#L165-22 anyStopRequested_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret28#1;havoc anyStopRequested_#t~ret28#1; 1660944#L1687 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1660932#L1740 isIdle_#t~ret32#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret32#1;havoc isIdle_#t~ret32#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1660931#L1753 cleanup_#t~ret19#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~8#1 := cleanup_#t~ret19#1;havoc cleanup_#t~ret19#1; 1660776#L1148 assume !(0 != cleanup_~tmp~8#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_~tmp~19#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1660773#L138-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1660771#L165-26 stopRequestedAtCurrentFloor_#t~ret45#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1660769#L2181-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1660767#L1585-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1660765#L1606-1 stopRequestedAtCurrentFloor_#t~ret46#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1660762#L2188-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1660760#L2193-1 timeShift_#t~ret59#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1; 1660757#L2330-2 assume !(0 != timeShift_~tmp___9~2#1); 1660755#L2421-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1660754#L2421-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1660752#L1772-2 assume !(1 == stopRequestedInDirection_~dir#1); 1660753#L1941-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1667923#L2094-2 timeShift_#t~ret66#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1; 1667906#L2429-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1667904#L2203-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1660579#L2208-2 timeShift_#t~ret67#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1660580#L1772-3 assume !(1 == stopRequestedInDirection_~dir#1); 1659974#L1941-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1659968#L2094-3 timeShift_#t~ret68#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1; 1659966#L2438-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret44#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1646937#L2148-5 assume !(1 == ~currentHeading~0); 1618830#L2158-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1618827#L2158-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1618825#L2164-11 assume { :end_inline_continueInDirection } true; 1618823#L2438-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret96#1, __utac_acc__Specification2_spec__3_#t~ret97#1, __utac_acc__Specification2_spec__3_#t~ret98#1, __utac_acc__Specification2_spec__3_#t~ret99#1, __utac_acc__Specification2_spec__3_#t~ret100#1, __utac_acc__Specification2_spec__3_#t~ret101#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~21#1, __utac_acc__Specification2_spec__3_~tmp___0~10#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~21#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1652328#L1568-1 __utac_acc__Specification2_spec__3_#t~ret96#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~21#1 := __utac_acc__Specification2_spec__3_#t~ret96#1;havoc __utac_acc__Specification2_spec__3_#t~ret96#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~21#1; 1652327#L2846-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1652326#L2860-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1652325#L2862-1 assume !(0 != ~floorButtons_spc2_1~0); 1611881#L2875-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1652324#L2890-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1652323#L2905-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1611869#L2906-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1611999#L2453-1 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1611995#L1128-2 [2022-07-22 02:27:22,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:22,393 INFO L85 PathProgramCache]: Analyzing trace with hash 1981013845, now seen corresponding path program 1 times [2022-07-22 02:27:22,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:22,393 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [194533674] [2022-07-22 02:27:22,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:22,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:22,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 02:27:22,406 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-22 02:27:22,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 02:27:22,455 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-22 02:27:22,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:27:22,456 INFO L85 PathProgramCache]: Analyzing trace with hash -1433059393, now seen corresponding path program 1 times [2022-07-22 02:27:22,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:27:22,456 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1586935175] [2022-07-22 02:27:22,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:27:22,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:27:22,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:27:22,487 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-07-22 02:27:22,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:27:22,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1586935175] [2022-07-22 02:27:22,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1586935175] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:27:22,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:27:22,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:27:22,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2012897430] [2022-07-22 02:27:22,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:27:22,488 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:27:22,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:27:22,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:27:22,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:27:22,489 INFO L87 Difference]: Start difference. First operand 104541 states and 190579 transitions. cyclomatic complexity: 86040 Second operand has 7 states, 7 states have (on average 12.714285714285714) internal successors, (89), 7 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)